Author Topic: Few unsorted - Part 2  (Read 33458 times)

0 Members and 1 Guest are viewing this topic.

June 04, 2008, 10:22:29 pm
Reply #30

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 05, 2008, 03:52:04 pm
Reply #31

sowhat-x

  • Guest
Quote
hxxp://513389.cn/808.txt
Or...
hxxp://513389.cn/yy.txt
--->
Quote
hxxp://163a.optioner.cn/y0.exe
Up to...
hxxp://163c.optioner.cn/y28.exe
Plus...
Quote
hxxp://163a.optioner.cn/yd.exe
=================
Quote
hxxp://w.117b.cn/config.txt
Or...
hxxp://www.mvoe.cn/config.txt
--->
Quote
hxxp://www.345bi.cn/new/01.exe
Up to...
hxxp://www.345bi.cn/new/30.exe
Plus...
Quote
hxxp://www.345bi.cn/new/are.exe
=================
Quote
hxxp://exe.wokaixin.com/014.exe
hxxp://windows.loveyoushipin.com/win.exe
hxxp://www.makgcat.com/sse.exe
hxxp://dm.htifns.com.cn/vv.exe
hxxp://www.userlg.cn/css.gif
hxxp://xia.iphone001.com/down/014.exe
hxxp://xia.iphone001.com/down/abd.cab

June 05, 2008, 09:10:06 pm
Reply #32

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

June 09, 2008, 04:06:27 am
Reply #33

sowhat-x

  • Guest
Just a couple of bot-related malware....found them while browsing ryan1918 forums...
seems that these lamers are still up and running...  >:(

Quote
hxxp://66.29.25.194/~tspoiler/catalog/imgs/logo.gif
hxxp://app4.websitetonight.com/projects/6/6/5/5/665506/uploads/sn.no-ip.info.exe

June 09, 2008, 07:57:43 am
Reply #34

sowhat-x

  • Guest
Quote
hxxp://karate-passarino.it/video1.exe
hxxp://impresalavoro.it/video1.exe
hxxp://www.quinotizie.info/video.exe
hxxp://www.flexistav.cz/video1.exe
hxxp://anykindmp3.com/download/get.php?id=4029
hxxp://aviinstrument.com/mp3download.php?fn=MP3-Track%2B03.mp3&id=4029

Also,check out this one...
Quote
hxxp://androsik.blogspot.com/
All external links in here are malware...and it seems like it's regularly "updated" as well...  >:(

June 09, 2008, 05:29:15 pm
Reply #35

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964
Also,check out this one...
Quote
hxxp://androsik.blogspot.com/
All external links in here are malware...and it seems like it's regularly "updated" as well...  >:(


Searching for "NEW Viagra Super Active !! Your Coupon" finds a couple of others aswell. Either spam, malware or both.

http://empresas-chile.blogspot.com
http://citizenhiphop.blogspot.com/
http://garbagegarbage.blogspot.com/


Also related to the "you look really stupid" spam

http://aceita-este-poema.blogspot.com

Which is Exchanger related: http://www.malwaredomainlist.com/forums/index.php?topic=1853.0