Author Topic: hxxp://www.vvvic.com/  (Read 4870 times)

0 Members and 1 Guest are viewing this topic.

September 10, 2009, 11:30:54 pm
Read 4870 times

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
http://www.malwaredomainlist.com/forums/index.php?topic=3311.0 // yasisi.co.kr

Quote
hxxp://www.vvvic.com/
   hxxp://www.vvvic.com/common/js/Link.js
      hxxp://125.128.6.11/t./swf.js
         hxxp://125.128.6.11/t./Main.asp
            hxxp://125.128.6.11/t./ad.htm
               hxxp://www.eleparts.co.kr/data/msn.exe
            hxxp://125.128.6.11/t./index.htm
               hxxp://125.128.6.11/t./he1.swf
                  hxxp://tour.ivancity.com/images/ivan/logo.exe

September 11, 2009, 03:05:29 am
Reply #1

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
I don't find anything at vvvic.com which redirects to those exploits. Can you help me ?
Ruining the bad guy's day

September 11, 2009, 03:15:26 am
Reply #2

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
it seems that site admin delete script.

i captured script this morning.

September 11, 2009, 10:28:44 pm
Reply #3

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
09, 12, 2009. 07:28 am GMT+8