Author Topic: 91.212.41.111  (Read 10019 times)

0 Members and 1 Guest are viewing this topic.

May 20, 2009, 08:54:23 pm
Read 10019 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
redirects to Luckysploit
Code: [Select]
autoperformspec.com/in.cgi?17&private4=nonadultexe
redirects to fake av
Code: [Select]
gje.stakeshouse.cn/in.cgi?9
autoperformspec.com/in.cgi?9
http://wepawet.cs.ucsb.edu/view.php?hash=cbeeb1718124521feea7c70a20ef0084&t=1242852849&type=js
Ruining the bad guy's day

May 28, 2009, 11:09:32 am
Reply #1

Malware-Web-Threats

  • Special Members
  • Hero Member

  • Offline
  • *

  • 354
    • MalwareURL
redirects to the same luckysploit at updateserversoftware[.]com served by hikimounttrail[.]com

example:
Wepawet
Wepawet

Code: [Select]
apprecearlyrock.com/in.cgi?17&private3=adultexe
autoperformspec.com/in.cgi?17&private3=adultexe
bankinggolf.cn/in.cgi?17&private3=adultexe
clubmillionswow.cn/in.cgi?17&private3=adultexe
dayindigo.cn/in.cgi?17&private3=adultexe
designroots.cn/in.cgi?17&private3=adultexe
drawingstyle.cn/in.cgi?17&private3=adultexe
dreamlitediamond.cn/in.cgi?17&private3=adultexe
greenhistory.cn/in.cgi?17&private3=adultexe
financeimprove.cn/in.cgi?17&private3=adultexe
heartdomainer.cn/in.cgi?17&private3=adultexe
housedomainname.cn/in.cgi?17&private3=adultexe
housevisual.cn/in.cgi?17&private3=adultexe
islandtravet.cn/in.cgi?17&private3=adultexe
kaktotak.net/in.cgi?17&private3=adultexe
lifenaming.cn/in.cgi?17&private3=adultexe
liteauction.cn/in.cgi?17&private3=adultexe
litefront.cn/in.cgi?17&private3=adultexe
melodynew.cn/in.cgi?17&private3=adultexe
moulitehat.cn/in.cgi?17&private3=adultexe
musicdomainer.cn/in.cgi?17&private3=adultexe
newtransfer.cn/in.cgi?17&private3=adultexe
nextfreedollar.com/in.cgi?17&private3=adultexe
nicescores.cn/in.cgi?17&private3=adultexe
oceandealer.cn/in.cgi?17&private3=adultexe
palaceyou.cn/in.cgi?17&private3=adultexe
partsocean.cn/in.cgi?17&private3=adultexe
peopleopera.cn/in.cgi?17&private3=adultexe
rainfinish.cn/in.cgi?17&private3=adultexe
rainjukebox.cn/in.cgi?17&private3=adultexe
resorttravet.cn/in.cgi?17&private3=adultexe
roomsme.cn/in.cgi?17&private3=adultexe
roselambda.cn/in.cgi?17&private3=adultexe
schoolh.cn/in.cgi?17&private3=adultexe
seamodern.cn/in.cgi?17&private3=adultexe
smilecasino.cn/in.cgi?17&private3=adultexe
soulmosp.cn/in.cgi?17&private3=adultexe
symphonygold.cn/in.cgi?17&private3=adultexe
stakeshouse.cn/in.cgi?17&private3=adultexe
startgetaways.cn/in.cgi?17&private3=adultexe
teamwows.cn/in.cgi?17&private3=adultexe
travetbeach.cn/in.cgi?17&private3=adultexe
travets.cn/in.cgi?17&private3=adultexe
use-sena.cn/in.cgi?17&private3=adultexe
vilasse.cn/in.cgi?17&private3=adultexe
vilihood.cn/in.cgi?17&private3=adultexe
vitamingood.cn/in.cgi?17&private3=adultexe
websiteflower.cn/in.cgi?17&private3=adultexe
weekendtravet.cn/in.cgi?17&private3=adultexe
worksean.cn/in.cgi?17&private3=adultexe
workfuse.cn/in.cgi?17&private3=adultexe
wowregister.cn/in.cgi?17&private3=adultexe
xuyxuyxuy.cn/in.cgi?17&private3=adultexe
youbonusnew.cn/in.cgi?17&private3=adultexe
yrapyatnica.com/in.cgi?17&private3=adultexe
zyne4ka.com/in.cgi?17&private3=adultexe