Author Topic: Liberty Exploit System kit  (Read 35601 times)

0 Members and 1 Guest are viewing this topic.

September 13, 2009, 03:51:15 pm
Reply #15

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Code: [Select]
libesouz.ru/pao/admin.php
kvumurij.cn/2cv/admin.php
uniqstats.net/giri/admin.php
dzuqiqaz.cn/rur/admin.php
syukadig.cn/dj/admin.php

user,pass

most interesting is
Code: [Select]
uniqstats.net/giri/admin.php
The referer section contains lots of sites which direct to the exploit kit. I have added some of them to our list, but there too many for manual analysis.
We need an automized analysis for those domains.
Ruining the bad guy's day

September 13, 2009, 07:50:01 pm
Reply #16

cleanmx

  • Special Members
  • Hero Member

  • Offline
  • *

  • 3405
    • Spam-Filter Anti-Spam Virenschutz - CLEAN MX Managed Anti-Spam Service ist die Lösung für Ihr Spam-Problem
i put the referers into clean-mx , sorting out false-positives... seems so about 90% are really infected!

... gerhard

see attached results ... 1968 uniqe domains... vt-scorce are just a bit behind after my bulk review... so this column is not populated in this file...

September 14, 2009, 01:58:16 am
Reply #17

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Hi gerhard,

In which format is your file? I can't load this in excel so I copy/paste the text from notepad to excel but I've the same result.

I can't copy a complete column.

Can you export this in an excel format?

I currently scan the list with wepawet - even if the result is bening I can check for the string ".cn/giri/" and post a list of all compromised domains.

September 14, 2009, 08:16:49 am
Reply #18

cleanmx

  • Special Members
  • Hero Member

  • Offline
  • *

  • 3405
    • Spam-Filter Anti-Spam Virenschutz - CLEAN MX Managed Anti-Spam Service ist die Lösung für Ihr Spam-Problem

September 14, 2009, 09:26:07 am
Reply #19

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Thanks. Better in csv with column separated  :)

Where did you get the country and source? ARIN, APNIC..

September 14, 2009, 09:36:14 am
Reply #20

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Thanks. Better in csv with column separated  :)

Where did you get the country and source? ARIN, APNIC..

can be queried from the same source where I get the ASN numbers from.

http://www.team-cymru.org/Services/ip-to-asn.html
Ruining the bad guy's day

September 14, 2009, 09:51:12 am
Reply #21

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
cool, I think I will upgrade this on my site  ;D

September 14, 2009, 10:53:55 am
Reply #22

cleanmx

  • Special Members
  • Hero Member

  • Offline
  • *

  • 3405
    • Spam-Filter Anti-Spam Virenschutz - CLEAN MX Managed Anti-Spam Service ist die Lösung für Ihr Spam-Problem
source comes from whois.. (arin,lacnic,apnic,afrinic,ripe)
as# comes if not in whois query of source from cymru...


--gerhard



September 15, 2009, 09:21:37 am
Reply #23

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Exploits:
Code: [Select]
embrari-1.cn/giri/index.php
embrari-1.cn/giri/dolorGalleyMake.pdf
embrari-1.cn/giri/isAre.swf
embrari-1.cn/giri2/index.php
embrari-1.cn/giri2/repeatExactHumour.pdf
embrari-1.cn/giri2/lineNow.swf
pdf:
http://wepawet.iseclab.org/view.php?hash=cacff3d5fc83d14ccd5225e3fb0ab4e8&t=1252997936&type=js
http://wepawet.iseclab.org/view.php?hash=1c09e9e1966c469a15e34daee0567bdb&t=1252998425&type=js
flash:
http://wepawet.iseclab.org/view.php?hash=1102da81605db7723776c409cec5ff7e&type=swf
http://wepawet.iseclab.org/view.php?hash=81020cbb11d70302b518205200ba4ee5&t=1252997948&type=js

Trojan
Code: [Select]
embrari-1.cn/giri/update.php
embrari-1.cn/giri/update.exe
embrari-1.cn/giri2/update.php
embrari-1.cn/giri2/update.exe
http://wepawet.iseclab.org/view.php?hash=01a85e1f9be6734cc18b483da942f2af&t=1252998040&type=js
http://www.virustotal.com/analisis/2f0544c8c8f225b495bef5342744f0948494023e000e5870af52518dcfa90d9c-1252912362 - 1/41 (2.44%)

CAT-QuickHeal: DNAScan

http://anubis.iseclab.org/?action=result&task_id=1498ae9142f410d2431a9e38aa62dc98a&format=html

Quote
From ANUBIS:1038 to 212.117.185.19:80 - [212.117.185.19] 
Request: GET /vur/controller.php?action=bot&entity_list=&uid=1&first=1&guid=2893656641&rnd=946862 
Response: <no reply>

Control Panel
Code: [Select]
embrari-1.cn/giri/admin.php
embrari-1.cn/giri2/admin.php

September 15, 2009, 12:25:36 pm
Reply #24

cleanmx

  • Special Members
  • Hero Member

  • Offline
  • *

  • 3405
    • Spam-Filter Anti-Spam Virenschutz - CLEAN MX Managed Anti-Spam Service ist die Lösung für Ihr Spam-Problem
Iwill check 1219 host out of 2419 refered by admin panel...
all others are already in db

Code: [Select]
http://024jyw.cn/
http://0xblog.com/
http://1199ctraining.org/
http://121-vans.co.uk/
http://124.217.247.80/
http://127.0.0.1/
http://1493.ru/
http://172.26.88.17/
http://172.27.88.17/
http://202.129.34.53/
http://203.184.40.73/
http://205.188.242.5/
http://217.41.27.235/
http://3x-today.com/
http://4everbags.org/
http://4i4.net/
http://4im.2x4.ru/
http://585production.info/
http://62.15.104.74/
http://70ms.cz/
http://74.125.91.132/
http://aaphoto.ca/
http://abramsonlegal.com/
http://absoluteawnings.com/
http://academy.enforcementagent.net/
http://accapiu.com/
http://acnet.ge/
http://activeearth.net/
http://ad9.co.uk/
http://adthumanity.org/
http://aedesignltd.com/
http://aeroklub-ms.si/
http://afriditraders.com/
http://ahdaaf.ae/
http://ahk.emp-services.de/
http://akslimited.com.tr/
http://alai-tp.com/
http://albabelyia.com/
http://albertynki.pl/
http://alcoholkiller.es/
http://allianceresidential.co.uk/
http://almaremalta.com/
http://aloeverabeauty.co.uk/
http://alvar.webcat.no/
http://amchosp.com/
http://amketenes.com/
http://ammann-services.ch/
http://analyser.ch/
http://anandandanand.com/
http://annsceramics.info/
http://antiquesteam.com/
http://antracyt.pl/
http://aph.com.pt/
http://apn-plastique.com/
http://ap-thai.com/
http://arab-gamers.com/
http://arnita.in/
http://arofutbol.com/
http://aromakaynaksu.com/
http://arshadelectronics.in/
http://arthostel.be/
http://artist-and-more.de/
http://artools.info/
http://arvindfurniture.com/
http://asmanet.com/
http://asociacionaida.org/
http://aspafrica.com/
http://aspnorthamerica.com/
http://aspnorthamerica.org/
http://asprotech.com/
http://atpphotographic.com/
http://aulas-de-canto.com/
http://aurorats.pl/
http://auto.kiasat.com/
http://autorepair-software.com/
http://autototal.ro/
http://baannamping.com/
http://balicwinery.com/
http://balsas.com.mx/
http://baron1.com/
http://barsantimacchine.it/
http://bawy168.com/
http://bdgateway.org/
http://beachhostel.nl/
http://beardedcollie.com.ua/
http://beauty-smile.no/
http://beckablingtastic.com/
http://bellville.gov.ar/
http://best-frucht.de/
http://bestofkashmir.com/
http://best-top-10-web-hosting.com/
http://biblioteca.osteogenesis.info/
http://biesseacquari.com/
http://bigbassfisher.com/
http://bigtitslounge.com/
http://bike-spares.co.uk/
http://bisel.com/
http://bizarr.hu/
http://bjhxwy.cn/
http://bjrh888.com/
http://bk-bueroservice-online.de/
http://blackeyedpeastour.com/
http://blackkhaki.com/
http://blackmoresnight.fr/
http://blackwater-cuprumworks.net/
http://blinkdegree.com/
http://blme.ro/
http://blogs.avasthi.com/
http://bltwxgs.cn/
http://bntaz.net/
http://board.nichewealth.com/
http://bobamed.com/
http://bodrogferr.sk/
http://boemajewelry.com/
http://bogotrazitelj.com/
http://bolsacom.com/
http://bolu-gsim.gov.tr/
http://bonusgambling.org/
http://boroughofbridgeport.com/
http://bougresdanes.com/
http://boyhottss.com/
http://brainmelt.com/
http://brandswoodworking.com/
http://brinkworth.org.uk/
http://brownboys.be/
http://btakarate.com/
http://btf-nettingsdorf.com/
http://bucasgrande.com/
http://bucks-mont.com/
http://burdur.tsf.org.tr/
http://butterflypolska.pl/
http://buttonsmusic.com/
http://buxmont.biz/
http://buztasarim.com/
http://cabaretekiteschool.com/
http://cabat53.com/
http://cadburysamples.com/
http://cafadv.com.br/
http://caluya.com/
http://canwindoor.com/
http://capitancinema.com/
http://capriracing.co.uk/
http://caramoan.com/
http://careerswithyouth.org/
http://cartwright-hotel.co.uk/
http://carvalho-7.narod.ru/
http://catatouille.net/
http://cemcemil.com/
http://cewap.ru/
http://cfgm.es/
http://channel-microelectronic.de/
http://charlievalentinethemovie.com/
http://chat.bntaz.com/
http://chatnetcomunico.webcindario.com/
http://chaton.com.tr/
http://childfindersnet.org/
http://chiranjeevindia.com/
http://chordacorrupta.hr/
http://christianchurchesnetwork.com/
http://christy-towels.com/
http://circuitspectrum.com/
http://cirellijewelers.com/
http://cisspl.com/
http://civrileml.k12.tr/
http://classefinn.it/
http://click4hotelrooms.com/
http://clickintv.com/
http://clinicasanjose.cl/
http://clubk.co.nz/
http://club.telepolis.com/
http://cockbreeder.com/
http://coconutbar.de/
http://coffeeconsulting.ch/
http://colly.tv/
http://colnevalleyfencing.co.uk/
http://comert-industrial.ro/
http://companionsincompassion.org/
http://compuforless.com/
http://concalma.it/
http://cool-movies.ru/
http://copa10.com.ar/
http://cordatec.co.uk/
http://corruptedguild.net/
http://costaustin.org/
http://cpepyo.com/
http://cqhnlw.com/
http://cranio-behandlung.ch/
http://crbfzc.com/
http://cri.dk/
http://crm.centreforskills.com.au/
http://cs-destruction.pl/
http://cttransilvania.com/
http://cualestumuv.cl/
http://culturia.org/
http://cybertalk.co.nz/
http://cyklistika.cz/
http://daralfirdaws.com/
http://darelphotography.com/
http://dark-devils.com/
http://darts-shop.ch/
http://das-brumm.de/
http://datacompute.biz/
http://data-recovery-ntfs.com/
http://datatracksystem.net/
http://dave.bizhat.com/
http://davisrise.org/
http://ddofcs.com/
http://deadlyretribution.com/
http://decisiveoperations.com/
http://decministry.org/
http://deddington-arms-hotel.co.uk/
http://deltaserigrafia.com.br/
http://denger.in/
http://deradios.com/
http://designersunglasses.co.nz/
http://designranchinc.com/
http://dgboer.com/
http://diamondvacationhomes.com/
http://dict.cpepyo.com/
http://directorygarden.com/
http://dkssk7942.hosting.paran.com/
http://dlil.frsanjazan.com/
http://d-nabytok.sk/
http://dognus.com/
http://dollvet.com.tr/
http://domesticchurch.us/
http://do-nsn.net/
http://dotcomchrome.com/
http://dotservers.info/
http://doyouplaywithme.eu/
http://dpiproducts.com/
http://dreaminfo.es/
http://drustvo-posentjernej.si/
http://drustvo-sahpiran.si/
http://dushinews.com/
http://dylon.nl/
http://eba.com.sg/
http://ebnsoftware.co.uk/
http://ec.gr/
http://echographicsllc.com/
http://echoist.com/
http://edlington.hu/
http://elabueloeduca.com/
http://elbit.com.pl/
http://elegancebridalstudio.co.uk/
http://elisabeth-dasmusical.de/
http://elisanet.fi/
http://elmgrovecoltsfc.org/
http://elrdz.com/
http://embrari-1.cn/
http://eminemtourdates.com/
http://enotria.it/
http://e-party.com.br/
http://erdevelopments.co.uk/
http://erp.pieromagli.com/
http://ertsulovneba.ge/
http://ertsulovneba.ge./
http://eruaneto.co.il/
http://esher.surrey.sch.uk/
http://estoesmejico.com/
http://eurofudbal.net/
http://europe-map.org/
http://europowerinc.com/
http://euroseis.civil.auth.gr/
http://eventoslaantorcha.com.ar/
http://exxeco.fr/
http://eyesontrend.com/
http://f-1serwis.yoyo.pl/
http://f6f6a.com/
http://fairdealfurnituremalta.net/
http://faithfulfriends.us/
http://favory.ru/
http://fbcplaymakers.com/
http://feelmadrid.com/
http://felstedphoto.com/
http://feuerfonger.de/
http://feuerwehr-nauort.de/
http://fgalves.com/
http://fgicampania.it/
http://financialera.net/
http://first-page-ranking.co.uk/
http://fitness-equipment-clearance.co.uk/
http://flowersofsummer.com/
http://flytnt.co.uk/
http://fmclube.com.br/
http://fnoonak.com/
http://fragra.com/
http://frcweb.com/
http://freebingovouchers.co.uk/
http://fringehungary.hu/
http://frmviran.com/
http://f-t-h.de/
http://fttruckrepair.com/
http://furrypaw.org/
http://gacl.co.uk/
http://galeon.com/
http://gamecockbreeder.com/
http://gamecopyingguide.com/
http://gameheros.org/
http://gamesanook.raamas.com/
http://gautrain.co.za/
http://gazipasader.com/
http://geminief.com/
http://gemyakurda.net/
http://gioventu.org/
http://globalservices.efi.com/
http://gogoahotels.com/
http://goldstarworld.com/
http://gornikpolkowice.com/
http://gostgim.az.pl/
http://gotprize.com/
http://gppune.ac.in/
http://grand-che.ru/
http://grandmasterchang.com/
http://grieves-solicitors.co.uk/
http://grimm-vs.ch/
http://grkatke.sk/
http://groundswell.in/
http://gruberfarben.com/
http://gruponodo.com.ar/
http://gruppogiovanifand.it/
http://guardiangroup.com/
http://gucar.com.tr/
http://guinnessfestival.ch/
http://gurukripalodge.com/
http://guruofinfo.com/
http://gzhbq.com/
http://hajduker.hu/
http://halsemelektronik.com/
http://hamti.tvn.hu/
http://hangfun.com/
http://harrisonhoist.com/
http://haryana.com/
http://hasindia.org/
http://hawar11.com/
http://hawar11.lovenaa.net/
http://hawn.us/
http://hellmotel.com/
http://heninger.de/
http://heritagetaxllc.com/
http://highdiet.weightlossmegapack.com/
http://historiasdeo.com/
http://hitpins.com/
http://hivcongress2010.in/
http://hmcc.mofumofu.org/
http://hoff-fenster.de/
http://hoki-liiga.net/
http://hollytreehilton.com/
http://hollywoodstunts.com/
http://home.clara.net/
http://home.deds.nl/
http://home.earthlink.net/
http://home.kpn.nl/
http://homesbyderamo.com/
http://home.tbbs.net/
http://hos-com.com/
http://hotel-adriana.com/
http://hotel-bisevo.com/
http://hotelpark.hr/
http://hotelpresident.hr/
http://hotelulipy.cz/
http://hovsgoltravel.com/
http://hsci2009.org/
http://huanjingjiance.com.cn/
http://hundeschule-mainz.com/
http://huntinteriors.co.uk/
http://huntvb.com/
http://hydrotechpp.com/
http://hz-shipping.com/
http://i4cmwo.com/
http://iaroslavski.narod.ru/
http://ibertronics.com/
http://ibmsystem34.org/
http://ibrahimhakki.com/
http://icdsup.org/
http://icicle-mountaineering.ltd.uk/
http://idea-pr.com/
http://ideascelltours.com/
http://i-design-shop.com/
http://idgplanet.com/
http://iepsgh.free.fr/
http://iffty1.altervista.org/
http://igatha.com/
http://il-portico.com/
http://iltrenovecchio.it/
http://imeteo.by.ru/
http://impactoprotensao.com.br/
http://indesco-group.com/
http://index-sports.com/
http://indianhosting.net/
http://indiazapper.com/
http://inductionheating.cc/
http://inextcharger.com/
http://info.maxisvet.com/
http://ingoboerchers.de/
http://insight-finance.com/
http://intechgroup.co.th/
http://integracoop.com.br/
http://intertoys-kiers.nl/
http://introverts.net/
http://intwelligent.com/
http://ipmtalk.com/
http://ipsa-corp.com/
http://ipsbhopal.com/
http://irgeo.ru/
http://irianjaya.com/
http://irishdjforum.com/
http://ishi.catatouille.net/
http://isohunt.com/
http://issunboushi.jp/
http://istanbul.edu.tr/
http://itbayat.com/
http://it-souls.com/
http://ivbng.org/
http://izotermik.com/
http://jacobsmgt.com/
http://jamaatwomen.org/
http://jameskillian.com/
http://javierolona.com/
http://jaychemlk.com/
http://jbmti.org/
http://jenshairstudio.com/
http://jerrywalter.com/
http://jetmed.com.br/
http://jfkissow.dk/
http://jiahao138.cn/
http://jjtobras.com/
http://jkcorphr.mairwa.com/
http://joannebryantphotography.com/
http://jobooks.de/
http://jogjaphoto.net/
http://johnwschlitt.net/
http://joinfutbol.com/
http://jonclue.com/
http://jslvgang.com/
http://jtss.org/
http://jules-verne.ro/
http://justbondage.com/
http://justerinis.com/
http://juvenilejustice.org/
http://k3mall.co.kr/
http://kahta.meb.gov.tr/
http://kalinpinar.com/
http://karakurt.com/
http://kasdevlethastanesi.saglik.gov.tr/
http://kashifalgetaa.com/
http://kasist.com/
http://kawachigroup.com/
http://kayseriarge.org/
http://kbismarck.com/
http://kbismarck.org/
http://kenshusei.com/
http://kenshusei.com.au/
http://kerala-homes.com/
http://kevintiddfuneralhome.com/
http://kfcdejvice.cz/
http://khaleban.com/
http://khanyisaeducentre.co.za/
http://kia.ir/
http://kingsoccer.net/
http://kit-regensburg.de/
http://kiziltepeajansi.com/
http://kiziltepe.gov.tr/
http://klangdongmountainview.com/
http://klcm.co.uk/
http://kmc.phrae1.go.th/
http://knutangefc.com/
http://kobylka.com.pl/
http://kocaydin.com/
http://kola.flashtattoo.pl/
http://kolastyna.pl/
http://konstrukcje-stalowe.com.pl/
http://korsika-tours.de/
http://koukos-nest.gr/
http://kozanbilgi.net/
http://kpt1.obec.go.th/
http://kristenlaviola.com/
http://kristiancolantonio.com.ar/
http://krononet.hu/
http://krtecek-pi.cz/
http://kudat.com/
http://kueper.sharpness.org/
http://kungfounded.comicgenesis.com/
http://kurgarten-pz.de/
http://kutesexy.com/
http://kutesexy.net/
http://kuxmann.de/
http://labiotheque.com/
http://lackawannadynasty.com/
http://lahana-kapsulu.info/
http://lakbima.lk/
http://lakhanigroup.com/
http://lamphun.doae.go.th/
http://la-primavera.ru/
http://larrabe.com/
http://laufbahn-meyer.ch/
http://laza.uv.ro/
http://l-e-logistik-shop.de/
http://lemarq.com.br/
http://lemonshop.kr/
http://leslu.com.ar/
http://letterrep.com/
http://lifethatwins.com/
http://liftreklam.com/
http://lightsandholstersplus.com/
http://limitedsofa.com/
http://linear.com.br/
http://lisieuxtrust.org.uk/
http://live-bootleg.de/
http://lliladhar.com/
http://lmicehockey.org/
http://lobovalente.com/
http://location25.com/
http://loei.doae.go.th/
http://logisdupressoir.com/
http://logrende-hale.dk/
http://londonsantaclausparade.ca/
http://lori-cory-crevette.fr/
http://lottka.sk/
http://lovalfin.ru/
http://lovestheway.com/
http://lowiectwo.art.pl/
http://loyal-lads.de/
http://lsrmg.com/
http://lucky-summer.com/
http://lwkj2008.com/
http://maberi.nl/
http://mackenzieandcormack.co.uk/
http://madelinemontessori.com/
http://madelinpetit.com/
http://maderaslobera.com/
http://madezee.com/
http://mahatmaonline.org/
http://mahmutlarmtsk.com/
http://maisadour-semences.com/
http://maisonfromont.com/
http://malabon.com/
http://malmomaskin.se/
http://maltaboatcharter.com/
http://malta-lets.com/
http://maltatravelnet.com/
http://manghihilot.com/
http://map-academia.org/
http://marcasdocafe.com/
http://marcinsaktura.sliw.net/
http://mariner-usa.com/
http://markatextile.com/
http://markrottman.com/
http://marmagoasteel.com/
http://marmolesleon.com/
http://maxwelltourdates.com/
http://mcanj.com/
http://meat-free-meals.com/
http://medah.com/
http://medeelel.com/
http://medicteam.de/
http://medi-mation.com/
http://medteh-omsk.by.ru/
http://megamarble.co.uk/
http://members.iinet.net.au/
http://members.lycos.co.uk/
http://metpowerin.com/
http://micasona.com.ar/
http://michatauber.com/
http://michiah.com/
http://miklas.cz/
http://milflores.net/
http://millhousehotel.co.uk/
http://minicom.com.pl/
http://mininova.org/
http://mirandalake.com/
http://misilmeri1.fse.it/
http://mistermodel.com/
http://mixedsound.net/
http://mkfc.org.au/
http://mlacc.com.cn/
http://mlga.net/
http://mncwater.co.kr/
http://mobile-hundeschule-untermain.de/
http://mobius-ecommerce.com/
http://modagesalon.com/
http://monalisajewelry.com/
http://monkiki.muvc.net/
http://montfortschooldelhi.com/
http://moosoolacademy.com/
http://mops.zory.pl/
http://morais.ch/
http://moreone.it/
http://morrisinnovators.com/
http://mosgirls.ru/
http://mot.metamorphosis-i.com/
http://mozaiekwaalwijk.nl/
http://mroz.sk/
http://msantiagolaw.com/
http://msnt-miass.narod.ru/
http://m-storbeck.de/
http://msvvalumni.com/
http://multimedia.hannielwise.net/
http://mundoarmario.com/
http://murattasyurek.com/
http://mutki.gov.tr/
http://mvt-india.in/
http://mwbproductions.com/
http://mybach-systeme.de/
http://mydallascowboystickets.com/
http://nakedmasks.com/
http://nalinsubra.org/
http://nammi.co.uk/
http://nateks.com.tr/
http://nationalcashlenders.com/
http://nbi1.obec.go.th./
http://ncec-edu.com/
http://ncui.net/
http://necathalumni.com/
http://necathalumni.org/
http://neeraeyeclinic.com/
http://neocitec.com.mx/
http://neokrug.ru/
http://neurastenia.net/
http://newacademy.ormanschools.net/
http://newappleipod.info/
http://newcity.mn/
http://news24i.com/
http://newsheetltd.com/
http://nhochan.net/
http://nican.us/
http://nikohuelsmeier.de/
http://niost.org/
http://nithyanandabhavan.org/
http://nmr-riders.pl/
http://nmr-zgrana-ekipa.livenet.pl/
http://nongkhai.doae.go.th/
http://norsouth.net/
http://notborntoparticipate.com/
http://ntssvn.com/
http://numberonemilkshake.com/
http://nunocruzboxe.com/
http://nunodinis.com/
http://nutritioncentral.com.au/
http://nwbasketweavers.org/
http://nx3corp.com/
http://obrist-transporte.ch/
http://odtwarzaczemp3.pl/
http://oex.mypodcasts.net/
http://ognetushitel.kiev.ua/
http://ohlgroup.co.uk/
http://okotel.net.ua/
http://oldtimer-club-rastede.de/
http://omega-products.com/
http://omvio.com/
http://onboardmoto.com/
http://oneconsciousness.net/
http://oneiroi.com/
http://onpointpromotions.com.au/
http://ontario-home-builder.com/
http://ooper.parnu.ee/
http://openairphotography.com/
http://optyk-fotooptyka.pl/
http://orangecrescent.com/
http://orientaltas.com/
http://orlow.com/
http://oro-alacant.com/
http://osaklasterec.cv-region.cz/
http://osterkamp-druck.de/
http://otto-bikes.de/
http://oumara.ma/
http://our-wedding.ad9.co.uk/
http://over35soccerpcyc.com/
http://oyunevin.net/
http://ozavala.co.yu/
http://ozselplastik.com/
http://paislei.com/
http://pakkretchurch.org/
http://palloys.com.pl/
http://palloys.pl/
http://palma.cnt.es/
http://palmtree-shop.de/
http://panepintojewelers.com/
http://panoptic.hentapenta.com/
http://paragonresearch.com/
http://paranaque.com/
http://pasari-si-animale.ro/
http://pas.k12.mi.us/
http://passion-ultra.de/
http://pataylorcontracting.com/
http://pceva.com/
http://pctvcables.com/
http://pdautosport.szm.sk/
http://pdtrebnje.si/
http://peak-resource.com/
http://peksport.cz/
http://pelikiellot.hoki-liiga.net/
http://pennsygi.com/
http://perehod.net/
http://performerscity.com/
http://permocpk.ru/
http://perthsoccerclub.com.au/
http://pflegedienst-mit-herz.info/
http://pgbgroup.it/
http://photoeditingplace.com/
http://photos-online.biz/
http://photo-transport.co.uk/
http://phulieumay.vn/
http://pickpoint.com/
http://piggybanksystem.com/
http://piki.si/
http://pilioil.com/
http://pinoyhilot.com/
http://pirching-traubenberg.gv.at/
http://planbmag.com/
http://planetzogg.co.uk/
http://plasticosvanguardia.com/
http://plazma-club.ru/
http://pocketacesrepresents.com/
http://polcars.no/
http://pollardwater.com/
http://polycel.com/
http://pooletowncentre.com/
http://popupfashion.com/
http://portfolio.tolgabasaran.com/
http://portirene.com/
http://poshfloors.com/
http://ppexports.com/
http://pravaiprevodi.org/
http://printvend.net/
http://pro-casa.net/
http://professionails.hr/
http://professionalblackbook.com/
http://projectneouniverse.com.br/
http://prolog.ue.poznan.pl/
http://pro.mirporno.us/
http://provokemarketing.com/
http://proxy.bntaz.com/
http://prs-angola.com/
http://pszinapszis.hu/
http://publicacoesdirectas.pt/
http://pumpkindriver.com/
http://puncs.eu/
http://quadrantvehicles.com/
http://qualitycompanionship.com/
http://queenscharm.com/
http://racioszerszam.hu/
http://radiolobos.com.ar/
http://radiopellenera.com/
http://radovar.kiev.ua/
http://raduga-gizni.ru/
http://radyosir.com/
http://raffaidavid.extra.hu/
http://raggaron.com/
http://rajshriworld.com/
http://ransomessportsfc.com/
http://rapidfirecontroller.co.uk/
http://rayiha.com.tr/
http://raysmithphotography.com/
http://realestatedubai.ae/
http://rebeccashopping.com/
http://recados.bq.com.br/
http://regnantsoftech.com/
http://reiff-tpshop.de/
http://reinangusfarm.com/
http://reliasys-solutions.com/
http://reluga.com/
http://rendimobilya.com/
http://rep-lu.de/
http://reprocopy.hu/
http://resi.at/
http://resistance-welding.com/
http://reviews.beachhostel.nl/
http://reviewscheck.com/
http://revizyonhaber.org/
http://rexpeed.com/
http://rickymancini.co.uk/
http://right-retail.co.uk/
http://rigips.ro/
http://ripoc.com/
http://rite.co.in/
http://rituelsanat.com/
http://rivergardenbedandbreakfast.com/
http://riversedgewelding.com/
http://rksca.com/
http://rockhillconcrete.com/
http://romarketing.ro/
http://rosban.net/
http://rosetrees-golden.de/
http://rotez.ru/
http://r-trend.eu/
http://ruihefood.com/
http://ryg2.obec.go.th/
http://saadoun.com/
http://sabir217.org/
http://sabkaguru.com/
http://sabtech.com.br/
http://saenzpweb.com.ar/
http://sagarband.com/
http://saktiland.com/
http://salamusicodromo.com/
http://salon-schmetterling.de/
http://samhakdo.com/
http://samsung-witu.narod.ru/
http://sandakan.com/
http://sanitas-construct.ro/
http://sapancapansiyon.com/
http://sapphiremine.com/
http://sapsalesianos.com.ar/
http://sarahspixelworld.com/
http://sasseil.ru/
http://savanna-machida.com/
http://savenergy.it/
http://sblabradors.szm.sk/
http://sb-sport.com/
http://sciencecentral.org/
http://scotlandselfcateringapartments.com/
http://scruffymoo.com/
http://scuola.alto-adige.it/
http://sdynj.com/
http://secrete-de-chef.ro/
http://securityoffice.com/
http://sejny.straz.bialystok.pl/
http://sejuega.net/
http://selectawindows.co.uk/
http://semotex.cz/
http://sena.com.tr/
http://sergeyignatov.com/
http://sergiocerrutti.com/
http://serhatbaydar.com/
http://servicar25.es/
http://seuki.com/
http://sex-combos.com/
http://seyan.w.interii.pl/
http://sfaw.co.uk/
http://s-glay.com/
http://shadowrailers.net/
http://shalomtv.org/
http://sharmanspharmacy.com/
http://shindechemicalsindia.com/
http://shoemarket.gr/
http://shopchristy.co.uk/
http://shopmanhattanite.com/
http://shoqaiq.net/
http://shrisantoshimatamandir.com/
http://shskew.melb.catholic.edu.au/
http://shuteentravel.com/
http://sidevillage.com/
http://sifadogada.com/
http://sifagarden.com/
http://siganengranada.es/
http://silisyum.net/
http://simetridershaneleri.com/
http://simonvideo.com.sg/
http://sinainsaat.com/
http://sinapalayesh.com/
http://singrauliedu.com/
http://sioroznava.sk/
http://sistipmerkezi.com/
http://sitelermobilyasi.com/
http://sitioderadios.com.ar/
http://sivrikale.net/
http://sjshospitality.com/
http://skidomel.com/
http://skillbrokers.co.uk/
http://skipsoft.com/
http://sklad10.ru/
http://skywebservice.com/
http://slagelse-rens.dk/
http://sle.co.in/
http://slgroplus.ro/
http://sltbroadband.com/
http://smartgold.ru/
http://smokefreerotherham.co.uk/
http://smssariogullari.com.tr/
http://socialbeautytips.com/
http://sohb3t.com/
http://soidi.com/
http://soizaa.com/
http://solbyte.com/
http://solentmediation.com/
http://soluxions.com/
http://somatheeram.org/
http://soundman.co.uk/
http://sounds.rising-star.net/
http://soundstar.ch/
http://soundvisionireland.ie/
http://sp137.edu.lodz.pl/
http://specnazavto.ru/
http://spectrumcommunications.co.in/
http://spielesky.de/
http://spiralwood.ro/
http://sportovky.info/
http://sportslifeentertainment.com/
http://spotlight-musical.de/
http://spotlightmusical.de/
http://spotlight-store.de/
http://springtime.ro/
http://spryglice.pl/
http://sqecial.org/
http://srbportfolio.com/
http://srilankapatriot.org/
http://sriperumbudur.in/
http://srivenkateswara.in/
http://ssc.gb.com/
http://sskedu4.go.th/
http://sstv.ge/
http://stabraammonastery.com/
http://st-aloisia.de/
http://stamps.on-line.digicom.bg/
http://stanford-logistics.com/
http://star50bags.com/
http://steelwater-works.com/
http://steelwater-works.net/
http://stemlinetherapeutics.com/
http://stephengould.org/
http://stepschd.org/
http://stilegno.com/
http://stillwaterslifestyle.co.uk/
http://stmaryssaffronwalden.org/
http://stonyi-fafa.extra.hu/
http://strawberrylabs.in/
http://studioisa.net/
http://stv.hr/
http://sucati.com/
http://successbc.ca/
http://successwithlove.com/
http://sullivansltd.com/
http://sumatra.com.pl/
http://summer.mmm.edu/
http://sunflowerpress.net/
http://sunriseindustries.in/
http://super6products.com/
http://support.redhotservers.com/
http://surfacesavior.com/
http://susumo.co.in/
http://susuzyibo.com/
http://svetisava.si/
http://svetskirat.net/
http://svjothiramalingam.com/
http://svolvaer.net/
http://swastik2009.blackapplehost.com/
http://swfaustyna.waw.pl/
http://sydneytrapezeschool.com/
http://sylvester.ro/
http://szibw.com/
http://szinkronuszas.hu/
http://t6art.com/
http://taganka.newhost.ru/
http://talkmed.co.uk/
http://tallerdefotoperiodismo.com/
http://tamsohbet.com/
http://tamstar.co.uk/
http://tandtwebdesign.co.uk/
http://tangtang.de-exquisite.com/
http://tara1776.com/
http://tarakuther.com/
http://tarcc.com/
http://tarihk.anadolu.edu.tr/
http://tatbim.com/
http://taylorfoiles.com/
http://taylorlautnerweb.com/
http://taysidecja.org.uk/
http://tdv-btl.edu.az/
http://teamforceuk.com/
http://teatrumanoel.com.mt/
http://tecbizstra.com/
http://technobharathi.org/
http://technowebengg.com/
http://tedabg.com/
http://tefkot.com/
http://teisalon.com/
http://teknospark.hu/
http://temyatt.com/
http://terohannula.com/
http://terra.es/
http://tessolutions.com/
http://testpilot.sk/
http://texeltrade.com/
http://tffhgdkayseri.org.tr/
http://tfvictorytoys.com/
http://tg-bisingen.de/
http://tg-boeckingen.de/
http://thatsyfood.com/
http://thebeadstalk.co.uk/
http://thecustominfo.com/
http://thecutlers.org.uk/
http://theexperienceagency.com/
http://thegoalexperts.com/
http://thehalflink.com/
http://theiiat.or.th/
http://thejerichomovement.com/
http://thejourneyonline.org/
http://thekiosque.com/
http://thelochgairhotel.com/
http://themayflowerhotels.com/
http://theos-studio.com/
http://thepiratebay.org/
http://thepontiacsolstice.com/
http://theskincentre.in/
http://theveracitygroup.com/
http://thgpublishing.co.uk/
http://thondaman.org/
http://t-h.ru/
http://ticmagazine.com/
http://timepiecesny.com/
http://timior.by/
http://tim-morris.com/
http://tinascherer.de/
http://tintesbros.com/
http://tirnakbar.com/
http://tkxb.net/
http://tntdizayn.com/
http://today-xxx.com/
http://toddle-inn.com/
http://togoone.com/
http://togy.com/
http://tokkegroup.com/
http://tom.si/
http://tongjibookshop.com.cn/
http://tonicemballage.com/
http://toprpm.com/
http://toriamostourdates.com/
http://torontocsc.com/
http://touchstarccs.co.uk/
http://touchstar.co.za/
http://toulouse-nautique.com/
http://toyota-stahl.de/
http://tradersinternational.co.uk/
http://trancemixes.spb.ru/
http://transfilm.com/
http://translate24.net/
http://translitera.org/
http://transurl.babylon.com/
http://travel24india.com/
http://trc.com.pk/
http://treeline-inc.com/
http://tremesne.cz/
http://trevolnet.hu/
http://tri-a-run.com/
http://tribblecreativegroup.com/
http://trimitraabadi.com/
http://trinichatters.com/
http://tripsdrill-info.de/
http://trueboptik.ch/
http://truhlarstvijara.cz/
http://tsijournals.com/
http://tufekciogullari.com/
http://turkbulletinboard.com/
http://turkishpub.com/
http://tuttoghiaccio.com/
http://tuzic.com/
http://tvlive.xhost.ro/
http://twistedbondage.com/
http://twizla.com.au/
http://tyaysd.org/
http://ub01.com/
http://ufrsakademi.org/
http://ufukalkan.com/
http://ugmix.com/
http://ukaromatics.com/
http://uk-bay.com/
http://ultracontrolo.com/
http://ultrathinpizza.com/
http://umja.org/
http://umzugskartons-umzugsshop.de/
http://uniawapno.webpark.pl/
http://unicad-gmbh.com/
http://unicad-gmbh.de/
http://unionganadera.com/
http://unizar.es/
http://Unknown/
http://updated.co.za/
http://urbanstrategies.org/
http://usaddress.com/
http://uslucakoyu.com/
http://usmile.co.th/
http://usssanfrancisco.org/
http://ustrem-bg.com/
http://utccarriers.com/
http://ut-gaming.org/
http://uumac.net/
http://v8forum.co.uk/
http://vakiskennis.nl/
http://vallecascdv.org/
http://valpi.es/
http://vandanvelope.ro/
http://variosoft.ch/
http://varvaressos3.ondsl.gr/
http://vegasmadeeasy.com/
http://vejmolova.com/
http://venator.hg.pl/
http://venise.ro/
http://ventureirs.com/
http://venusianarts.com/
http://vereinsring-hoechst.de/
http://verstappen.woelmuis.nl/
http://viajarindochina.com/
http://vichy-th.com/
http://vidaamorosa.com/
http://vidhayaksansad.org/
http://vikalp-multimedia.com/
http://vilailic.rs/
http://villiers-hotel.co.uk/
http://vinjanko.com/
http://vinzenz-von-paul-gymnasium.de/
http://visitmongolia.com/
http://vista-design.ch/
http://vitalik.biz/
http://vitalik.biz./
http://vivapinatas.co.uk/
http://vladmiva.ru/
http://volgyzugolyvendeghaz.hu/
http://von-aristoteles.de/
http://vote4navimumbai.com/
http://vpk.bme.hu/
http://vpstrat.com/
http://vrbancic.info/
http://vsr.hu/
http://vti-izegem.be/
http://vurdnt.com/
http://vuze.com/
http://w3webmedia.com/
http://wacom-tr.com/
http://wa-designs.net/
http://waldeck.ro/
http://walterdeitermann.de/
http://waltersfoto.com/
http://waplog.net/
http://warmclothing.co.uk/
http://warmsilver.ru/
http://warnamuda.com/
http://wasabiconcepts.com/
http://wasteandresources.dk/
http://waterquest.com/
http://watertite.net/
http://way2nature.com/
http://wcwonline.org/
http://wdtv.yuzde5.net/
http://webcric.com/
http://weblink.com.sg/
http://webplot.cn/
http://websolution99.com/
http://web.sysdat.it/
http://weddingday-tv.ru/
http://wedding.harianto.net/
http://weighttrainingroutinesguide.com/
http://welpenerziehung-wiesbaden.de/
http://wendellbsounds.com/
http://westazarvet.ir/
http://westlaholiness.org/
http://westonparkdental.co.uk/
http://wgreenshields.co.uk/
http://white-hart-hotel-dorchester.co.uk/
http://whynot-cafe.com/
http://wickedweb.co.uk/
http://wideangle-tv.com/
http://wiga.kolobrzeg.pl/
http://wigwamdaycareschool.com/
http://wijkmarkphoto.com/
http://wildphotos.com/
http://wilkot.com/
http://wiltshire-icc.org/
http://winchopper.com/
http://winduptiger.com/
http://wir-fuer-hannover.de/
http://wirtschaft-utiger.ch/
http://witkamsound.com/
http://wkpodra.pl/
http://woodlands.plymouth.sch.uk/
http://world-med.com/
http://world-of-warcraft-videos.com/
http://worldspokersites.com/
http://wpforest.com/
http://wrcads.co.uk/
http://www1.otodo.net/
http://x-club.ws/
http://xdjyjy.com/
http://xensor.com/
http://xfiles.rubikon.pl/
http://xn--rhnpaulus-musical-0zb.de/
http://xoomer.virgilio.it/
http://xxx.mirporno.us/
http://yahyali.com.tr/
http://yakiddys.com/
http://yaziciogluyuz.org/
http://yenibilisim.com/
http://yenicidepostasi.com/
http://yeniram.gov.tr/
http://yerindemasaj.com/
http://yohddx.ro/
http://yolkcreatives.com/
http://yorkiuli.republika.pl/
http://zabeelschool.com/
http://zabrze.sr.gov.pl/
http://zachalert.org/
http://zamaniangroup.com/
http://zaminkavan.com/
http://zaobraczkowani.pl/
http://zbigniew_matyjaszczyk.republika.pl/
http://zdolinylopienki.republika.pl/
http://zebeth.com/
http://zeindianoceantrip.free.fr/
http://zelazostopy.pl/
http://zengeia.com/
http://zengia.com/
http://zenon-music.com/
http://zenskysvet.sk/
http://zerodegreeburn.com/
http://zerros-clan.com/
http://zespolbis.com.pl/
http://zfortes.com/
http://zheang.com./
http://zimarab.ru/
http://zirkusbilder.ch/
http://znex.com/
http://zofiasarbinowo.republika.pl/
http://zpnanded.org/
http://zs2tychy.oswiata.org.pl/
http://zsborowa.emil.tnp.pl/
http://zsskolpb.edu.sk/
http://zssoskk.edu.sk/
http://zupnija-zrece.si/
http://zyxel.ro/


update after verification: these 155 out of above list are not infected

Code: [Select]
+-----------------------------------+
| domain                            |
+-----------------------------------+
| 0xblog.com                        |
| 124.217.247.80                    |
| 203.184.40.73                     |
| 3x-today.com                      |
| 4i4.net                           |
| 74.125.91.132                     |
| ahdaaf.ae                         |
| albertynki.pl                     |
| amchosp.com                       |
| arab-gamers.com                   |
| arofutbol.com                     |
| artools.info                      |
| asmanet.com                       |
| asociacionaida.org                |
| aspafrica.com                     |
| aspnorthamerica.org               |
| autototal.ro                      |
| barsantimacchine.it               |
| bigtitslounge.com                 |
| bike-spares.co.uk                 |
| blackkhaki.com                    |
| blackmoresnight.fr                |
| bntaz.net                         |
| bougresdanes.com                  |
| boyhottss.com                     |
| bucks-mont.com                    |
| buxmont.biz                       |
| cabat53.com                       |
| capitancinema.com                 |
| bntaz.com                         |
| chiranjeevindia.com               |
| clickintv.com                     |
| clubk.co.nz                       |
| companionsincompassion.org        |
| corruptedguild.net                |
| costaustin.org                    |
| cri.dk                            |
| dark-devils.com                   |
| das-brumm.de                      |
| decministry.org                   |
| e-party.com.br                    |
| erdevelopments.co.uk              |
| pieromagli.com                    |
| ertsulovneba.ge                   |
| ertsulovneba.ge                   |
| exxeco.fr                         |
| f6f6a.com                         |
| fbcplaymakers.com                 |
| feelmadrid.com                    |
| fitness-equipment-clearance.co.uk |
| flowersofsummer.com               |
| furrypaw.org                      |
| galeon.com                        |
| gameheros.org                     |
| efi.com                           |
| grkatke.sk                        |
| gruponodo.com.ar                  |
| hawar11.com                       |
| lovenaa.net                       |
| mofumofu.org                      |
| clara.net                         |
| deds.nl                           |
| kpn.nl                            |
| tbbs.net                          |
| hotel-bisevo.com                  |
| hotelpresident.hr                 |
| hsci2009.org                      |
| ibertronics.com                   |
| ibrahimhakki.com                  |
| idgplanet.com                     |
| igatha.com                        |
| intwelligent.com                  |
| istanbul.edu.tr                   |
| javierolona.com                   |
| kalinpinar.com                    |
| kasist.com                        |
| kayseriarge.org                   |
| kbismarck.com                     |
| kbismarck.org                     |
| kristenlaviola.com                |
| sharpness.org                     |
| kutesexy.com                      |
| kutesexy.net                      |
| l-e-logistik-shop.de              |
| leslu.com.ar                      |
| location25.com                    |
| lovestheway.com                   |
| maisadour-semences.com            |
| maltatravelnet.com                |
| medah.com                         |
| medeelel.com                      |
| iinet.net.au                      |
| mininova.org                      |
| msantiagolaw.com                  |
| necathalumni.com                  |
| necathalumni.org                  |
| newappleipod.info                 |
| newsheetltd.com                   |
| nhochan.net                       |
| nithyanandabhavan.org             |
| nmr-riders.pl                     |
| livenet.pl                        |
| ntssvn.com                        |
| nunocruzboxe.com                  |
| hentapenta.com                    |
| pctvcables.com                    |
| peak-resource.com                 |
| peksport.cz                       |
| hoki-liiga.net                    |
| photos-online.biz                 |
| phulieumay.vn                     |
| pollardwater.com                  |
| printvend.net                     |
| professionails.hr                 |
| bntaz.com                         |
| kiev.ua                           |
| rep-lu.de                         |
| rigips.ro                         |
| savenergy.it                      |
| sciencecentral.org                |
| shoqaiq.net                       |
| simetridershaneleri.com           |
| sivrikale.net                     |
| soizaa.com                        |
| srbportfolio.com                  |
| sstv.ge                           |
| susumo.co.in                      |
| sylvester.ro                      |
| tallerdefotoperiodismo.com        |
| teatrumanoel.com.mt               |
| teknospark.hu                     |
| temyatt.com                       |
| thecutlers.org.uk                 |
| thekiosque.com                    |
| themayflowerhotels.com            |
| thepiratebay.org                  |
| theskincentre.in                  |
| tinascherer.de                    |
| today-xxx.com                     |
| babylon.com                       |
| turkishpub.com                    |
| xhost.ro                          |
| vandanvelope.ro                   |
| venise.ro                         |
| venusianarts.com                  |
| vichy-th.com                      |
| vladmiva.ru                       |
| vurdnt.com                        |
| vuze.com                          |
| wasteandresources.dk              |
| way2nature.com                    |
| wickedweb.co.uk                   |
| worldspokersites.com              |
| yenicidepostasi.com               |
| republika.pl                      |
+-----------------------------------+
155 rows in set (0.01 sec)

September 15, 2009, 01:58:58 pm
Reply #25

cleanmx

  • Special Members
  • Hero Member

  • Offline
  • *

  • 3405
    • Spam-Filter Anti-Spam Virenschutz - CLEAN MX Managed Anti-Spam Service ist die Lösung für Ihr Spam-Problem
collected iframe informations out of these urls.

Code: [Select]
http://ad.hepsiburada.com/advEngine.aspx?accountID
http://games.soizaa.com/games_index.php
http://gununsitesi.milliyet.com.tr/d/bant_center.html
http://ihrhrhrhereo.cn/in.cgi?2
http://news.soizaa.com/poll.php
http://sondakika.ajansspor.com/tum.html
http://sondakika.haber7.com/
http://sondakika.internethaber.com/index.html
http://tradbox.net/doxt/pWtI
http://video.soizaa.com/video_index.php
http://vilailic.rs/templates/genesis_v1.0/includes/scroller.php
http://vspy.guildlaunch.net/srv/stealthspy.php?Address
http://www.cabat53.com/flash/index.html
http://www.kursna-lista.com/gedzeti/cache/gadget2.html
http://www.schulferien.org/kalender/partner/kalender_partner.html
http://www.swfupload.com/files/112704banner468x60.swf

September 15, 2009, 02:02:03 pm
Reply #26

cleanmx

  • Special Members
  • Hero Member

  • Offline
  • *

  • 3405
    • Spam-Filter Anti-Spam Virenschutz - CLEAN MX Managed Anti-Spam Service ist die Lösung für Ihr Spam-Problem
suspicious url's collected out of these, also found in google safebrowsing

Code: [Select]
http://support.redhotservers.com/themes/client_default/
http://www.professionalblackbook.com/
http://www.socialbeautytips.com/
http://www.tuzic.com/images/rating_loading.gif
http://www.tuzic.com/images/rating_tick.gif
http://www.tuzic.com/images/rating_warning.gif
http://www.tuzic.com/images/star.png
http://www.tuzic.com/includes/rating_process.php
http://www.zerodegreeburn.com/google_adsense_script.html

September 16, 2009, 04:49:36 am
Reply #27

Edgar Bangkok

  • Special Members
  • Full Member

  • Offline
  • *

  • 61
    • Edgar Internet Tools
   
On the same IP
Code: [Select]
tatoosite.it
 also 2 others site with scripts
Code: [Select]
http://directory.tatoosite.it/and
Code: [Select]
http://scambiovisite.tatoosite.it/
See also
http://edetools.blogspot.com/2009/09/alcuni-siti-it-colpiti-da-liberty.html

Regards

Edgar   :)

September 16, 2009, 01:34:03 pm
Reply #28

WIEx

  • Jr. Member

  • Offline
  • **

  • 34
    • Security
Quote
embrari-1.cn/giri/admin.php
Quote
embrari-1.cn/giri2/admin.php
user
pass

this is default access in liberty

September 16, 2009, 02:20:32 pm
Reply #29

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
Code: [Select]
filemarket.net/cpl/index.php
filemarket.net/cpl/layoutLikeH.pdf
filemarket.net/cpl/loremH.swf
filemarket.net/cpl/update.php
filemarket.net/cpl/update.exe
filemarket.net/cpl/admin.php
Wepawet
VirusTotal - 9/41 (21.95%) - Trojan.PSW.Uloadis

Redirects:
Code: [Select]
imgnode.cn/script/in.cgi?2