Author Topic: Malicious programs discovered yesterday  (Read 3067 times)

0 Members and 1 Guest are viewing this topic.

July 18, 2009, 04:14:26 pm
Read 3067 times

cruncytime

  • Newbie

  • Offline
  • *

  • 2
All of these are from one infection.

hxxp://v-i-e-w.net/xrun.tmp
hxxp://download.microsoft-update-center.com:88/files/db.exe
hxxp://installmoney.com/svchost.exe
hxxp://theinstalls.com/files/uprograms/dailybucks/dailybucks_install.exe
hxxp://74.52.164.210/pk/bb090621.exe
hxxp://dapda.cn/setup.exe
hxxp://x.b76.net/winres.exe
hxxp://theinstalls.com/files/uprograms/dailybucks/install.48349.exe
hxxp://totalsecurityscannerv3.com/download/Setup-93cf_02029-5.exe

Other sketchy traffic that I didn't verify as executable or even up:

hxxp://stat.winrar2009.cn:88/db.htm
hxxp://imgesinstudioonline.com/perce/fe58698f36d7af2dda18f21a861fda0cdd898c9d6605f261b78da73dbdc1f
dae12563f5227e48af8f/74188090f98/qwerce.gif
hxxp://yourimagesstudio.com/werber/fee8f9cfc6b72f4dcad8e2aad6af5a6cfde96cbd46957271e74df78d2db14d2ea2

July 18, 2009, 04:17:17 pm
Reply #1

cruncytime

  • Newbie

  • Offline
  • *

  • 2
Ah and some more malware: unrelated to above.

hxxp://212.117.174.14/installnew2.exe

hxxtp://heyjoy.cn/612.exe
hxxp://kerchex.biz/cash.exe