Few unsorted - Part 2

[JohnC]

Thanks.

[sowhat-x]

hxxp://513389.cn/808.txt
Or...
hxxp://513389.cn/yy.txt

--->

hxxp://163a.optioner.cn/y0.exe
Up to...
hxxp://163c.optioner.cn/y28.exe

Plus...

hxxp://163a.optioner.cn/yd.exe

=================

hxxp://w.117b.cn/config.txt
Or...
hxxp://www.mvoe.cn/config.txt

--->

hxxp://www.345bi.cn/new/01.exe
Up to...
hxxp://www.345bi.cn/new/30.exe

Plus...

hxxp://www.345bi.cn/new/are.exe

=================

hxxp://exe.wokaixin.com/014.exe
hxxp://windows.loveyoushipin.com/win.exe
hxxp://www.makgcat.com/sse.exe
hxxp://dm.htifns.com.cn/vv.exe
hxxp://www.userlg.cn/css.gif
hxxp://xia.iphone001.com/down/014.exe
hxxp://xia.iphone001.com/down/abd.cab

[JohnC]

Thanks.

[sowhat-x]

Just a couple of bot-related malware....found them while browsing ryan1918 forums...
seems that these lamers are still up and running... 

hxxp://66.29.25.194/~tspoiler/catalog/imgs/logo.gif
hxxp://app4.websitetonight.com/projects/6/6/5/5/665506/uploads/sn.no-ip.info.exe

[sowhat-x]

hxxp://karate-passarino.it/video1.exe
hxxp://impresalavoro.it/video1.exe
hxxp://www.quinotizie.info/video.exe
hxxp://www.flexistav.cz/video1.exe
hxxp://anykindmp3.com/download/get.php?id=4029
hxxp://aviinstrument.com/mp3download.php?fn=MP3-Track%2B03.mp3&id=4029

Also,check out this one...

hxxp://androsik.blogspot.com/

All external links in here are malware...and it seems like it's regularly "updated" as well... 

[JohnC]

Also,check out this one...

hxxp://androsik.blogspot.com/

All external links in here are malware...and it seems like it's regularly "updated" as well... 

Searching for "NEW Viagra Super Active !! Your Coupon" finds a couple of others aswell. Either spam, malware or both.

http://empresas-chile.blogspot.com
http://citizenhiphop.blogspot.com/
http://garbagegarbage.blogspot.com/


Also related to the "you look really stupid" spam

http://aceita-este-poema.blogspot.com

Which is Exchanger related: http://www.malwaredomainlist.com/forums/index.php?topic=1853.0