Few unsorted...

[sowhat-x]

...few more unsorted,some pseudo-extensions here as well...

hxxp://60.190.222.235/window.cab
hxxp://60.190.222.235/ww/nick.js
hxxp://bzx.cn/ooo.hta
hxxp://flyget.8800.org/ah.c
hxxp://flyget.8800.org/svcos.exe
hxxp://hotbb.cn/kdh.rar
hxxp://iebar.t2t2.com/iebar.cab
hxxp://o1.o1wy.com/kyo/usa.vbs
hxxp://pi.51.net/download/diybar2.cab
hxxp://update2.borlander.cn/cup/wincup.cab
hxxp://www.dudpoe.cn/1710.rar
hxxp://www.medclub.com.tw/share/pisacard.gif
hxxp://www.tutohm.org.cn/1710.rar
hxxp://www.yhuyet.org.cn/1710.rar
hxxp://xx.522love.cn/html/bg.cab

[JohnC]

These will be in the list soon thank you

[sowhat-x]

Excellent topic title.

Rotfl...yeah,certainly...especially when followed with the hundreds of links you've submitted...
excellent sense of humour I would say! 

[sowhat-x]

hxxp://60.190.118.15/new/1.exe
hxxp://60.190.118.15/new/2.exe
hxxp://60.190.118.31/new/3.exe
hxxp://60.190.118.31/new/4.exe
hxxp://60.190.118.71/new/5.exe
hxxp://60.190.118.50/new/6.exe
hxxp://74.222.132.178/new/7.exe
hxxp://60.190.118.50/new/8.exe
hxxp://60.190.118.50/new/9.exe
hxxp://60.190.118.50/new/10.exe
hxxp://60.190.118.182/new/11.exe
hxxp://60.190.118.182/new/13.exe
hxxp://60.190.118.203/new/14.exe
hxxp://60.190.118.71/new/15.exe
hxxp://60.190.118.203/new/16.exe
hxxp://74.222.132.186/new/17.exe
hxxp://74.222.132.186/new/18.exe
hxxp://74.222.132.186/new/19.exe
hxxp://74.222.132.186/new/20.exe
hxxp://74.222.132.186/new/21.exe
hxxp://74.222.132.186/new/22.exe
hxxp://74.222.132.178/new/23.exe
hxxp://74.222.132.178/new/24.exe
hxxp://74.222.132.178/new/25.exe
hxxp://74.222.132.178/new/26.exe
hxxp://74.222.132.178/new/27.exe
hxxp://74.222.132.178/new/28.exe
hxxp://74.222.132.178/new/29.exe
hxxp://74.222.132.178/new/30.exe
hxxp://74.222.132.178/new/31.exe
hxxp://74.222.132.178/new/32.exe
hxxp://74.222.132.178/new/33.exe

Almost all of them Upacked...next one is most probably a 'friend' of the above...

hxxp://60.190.118.151/a1.exe
hxxp://60.190.118.151/a2.exe
hxxp://60.190.118.151/a3.exe
hxxp://60.190.118.151/a5.exe
hxxp://60.190.118.151/a6.exe
hxxp://60.190.118.151/a8.exe
hxxp://60.190.118.151/a9.exe
hxxp://60.190.118.151/a10.exe
hxxp://60.190.118.151/a11.exe
hxxp://60.190.118.151/a12.exe
hxxp://60.190.118.151/a13.exe
hxxp://60.190.118.151/a14.exe
hxxp://60.190.118.151/a15.exe
hxxp://60.190.118.151/a16.exe
hxxp://60.190.118.151/a17.exe
hxxp://60.190.118.151/a18.exe
hxxp://60.190.118.151/a19.exe
hxxp://60.190.118.151/a21.exe
hxxp://60.190.118.151/a22.exe
hxxp://60.190.118.151/a23.exe
hxxp://60.190.118.151/a24.exe

[sowhat-x]

hxxp://www.0fish.cn/2.exe

Packed with MEW - detected by almost all AVs as "Small.tf" or so...

[JohnC]

These will be added soon.

[andrewmccain]

Have several more boatloads but wonder if public view of this particular section of the forum is warranted?

I think this should be public. If we censor information, what do we learn from that?

[sowhat-x]

Have several more boatloads but wonder if public view of this particular section of the forum is warranted?

I also agree 100% with andrewmccain...and I vote for: "Few unsorted - Part 2!" 

[bobby]

Open folder:

hxxp://pousadarecantonatureza.com.br/fotos/new/

[tjs]

Some live malware URLs from Dancho Danchev's blog:

buytraffic.cn/in.cgi?11 - 62.149.18.34
sclgntfy.com/ent2763.htm - 85.255.118.12
tds-service.net/in.cgi?20 - 72.233.50.148
spywareisolator.com/landing/?wmid=sga - 72.233.50.150
warinmyarms.com/check/upd.php?t=670 - 58.65.239.114
coripastares.com/in.php?adv=1267&val=3ee328 - 202.83.197.239
xanjan.cn/in.cgi?mikh - 78.109.22.246
chportal.cn/top/count.php?o=4 - 203.117.111.102
buhaterafe.com/in.php?adv=1208&val=65286d - 202.83.197.239
193.109.163.179/exp/count.php
193.109.163.179/exp/getexe.php
78.109.22.242/mikh/1.html
78.109.22.242/sh.html

TJS

[JohnC]

Thanks for these, they will be added soon.

[tjs]

FYI:

from lamodano.info/tim_data/modules/version.txt:

lamodano.info/tim_data/modules/oc2.exe
lamodano.info/tim_data/modules/mega.exe
lamodano.info/tim_data/modules/hr3.exe

TJS

[JohnC]

Thank you.