Is This True Is this about you guys down at WEBAIR?
I have found 3 address range groups which are closely connected to the fake codec websites, the first one was added to my firewall's blocked list when I found it was full of fake codec sites (and nothing else), the other 2 range groups were already on my list from quite a while back and triggered a number of time while researching the fake codec trojan (from trojan access attempts and attempting to access fake codec mirror sites). It seems like a good idea to block these ranges on any internet access you are in charge of, be sure to set your firewall [or any firewall-using device] to log any hits on this rule so that if it is hit during typical daily computer use you can investigate and report back what site/IP you found.
?
