Author Topic: Thread about Exchanger sites  (Read 43863 times)

0 Members and 1 Guest are viewing this topic.

June 02, 2008, 07:37:35 pm
Reply #15

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://agdarbud.pl/index7.php
>http://agdarbud.pl/main34.html
>>http://agdarbud.pl/pindex.php  <<-- fake 404, JavaScript
>>http://agdarbud.pl/wamkl.gif
>>http://agdarbud.pl/porno_new.exe  <<-- payload

http://agdarbud.pl/pindex.php
>http://agdarbud.pl//load.php  <<-- payload

June 02, 2008, 09:40:53 pm
Reply #16

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 05, 2008, 08:44:19 pm
Reply #17

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://hokejforum.sk/index3.php
>>http://hokejforum.sk/arch.exe
>>http://hokejforum.sk//load.php

Same scheme like the previous one. I gave here just the spammed link, and the exe files.

June 06, 2008, 09:07:36 am
Reply #18

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://impresalavoro.it/video.exe
http://impresalavoro.it/video1.exe
Doubleclick redirection used in mail, but it is not working if you click it over doubleclick.
If you try the links in the form I gave here (direct) - it will download the files.

June 06, 2008, 05:08:35 pm
Reply #19

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 07, 2008, 10:44:54 am
Reply #20

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://worldchinesewriters.com/index1.php
>http://worldchinesewriters.com/free_vid.exe
>http://worldchinesewriters.com/load.php

June 08, 2008, 02:29:35 pm
Reply #21

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://glamsmile.fr/index1.php
>http://glamsmile.fr/lite_porno.exe
>http://glamsmile.fr/load.php

June 08, 2008, 08:21:40 pm
Reply #22

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 09, 2008, 04:26:08 pm
Reply #23

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://morethir.at/index1.php
>http://morethir.at/new_mpg.exe
>http://morethir.at/load.php


New redirector, old malware site:
Code: [Select]
http://www.dogpile.com/clickserver/_iceUrlFlag=1?rawURL=http://impresalavoro.it/video1.exe&0=&1=0&4=244.732.085.037&5=912.605.906.658&9=3959244732085&1

June 09, 2008, 06:56:34 pm
Reply #24

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
From here: http://www.malwaredomainlist.com/forums/index.php?topic=1765.msg3517#msg3517
Code: [Select]
http://durantiluminacao.com.br/index.php
>http://durantiluminacao.com.br/shok_video.exe
>http://durantiluminacao.com.br/load.php

Code: [Select]
http://karate-passirano.it/video1.exe
http://karate-passirano.it/video.exe

June 09, 2008, 07:39:44 pm
Reply #25

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 10, 2008, 07:10:06 pm
Reply #26

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://www.dinekeluring.nl/index.php
>http://www.dinekeluring.nl/free_vid.exe
>http://www.dinekeluring.nl/load.php

June 10, 2008, 08:48:53 pm
Reply #27

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 18, 2008, 06:53:18 pm
Reply #28

bobby

  • Special Members
  • Hero Member

  • Offline
  • *

  • 322
    • Malzilla
Code: [Select]
http://www.wmrt2008.org/video1.exe
http://www.wmrt2008.org/video.exe
Original spam link with redirection:
Code: [Select]
http://www.dogpile.com/clickserver/_iceUrlFlag=1?rawURL=http://www.wmrt2008.org/video1.exe&0=&1=0&4=915.796.210.076&5=805.573.728.746&9=5004915796210&1

June 18, 2008, 07:31:31 pm
Reply #29

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964