Author Topic: hs.2-8.zlkon.lv (94.247.2.8)  (Read 9654 times)

0 Members and 1 Guest are viewing this topic.

April 14, 2009, 03:48:15 am
Read 9654 times

RS-232

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 165
Quote
    hxxp://www.extremetube09.com/cd
    hxxp://www.extremetube09.com/cd/
    hxxp://www.extremetube09.com/cd/1
    hxxp://www.extremetube09.com/cd/1/
    hxxp://www.extremetube09.com/cd/1/1
    hxxp://www.extremetube09.com/cd/1/1/
    hxxp://www.extremetube09.com/cd/1/1/wmcodec_update.exe

Quote
    hxxp://extrafastdownload.com/cd///setup.exe
    hxxp://extrafastdownload.com/cd///
    hxxp://extrafastdownload.com/cd//
    hxxp://extrafastdownload.com/cd/

Quote
    hxxp://myrealtube.net//cd///wmcodec_update.exe
    hxxp://myrealtube.net//cd///
    hxxp://myrealtube.net//cd//
    hxxp://myrealtube.net//cd/

All of the above are direct links to executables...depending on what url path is used,exe with a different hash will be returned.
Same type of trojan per domain name though.
Only for the "fun" of it...rs-232 aka sowhat-x aka younameit ;-)
http://www.youtube.com/watch?v=fADjY97_KTw