Malware Domain List

Malware Related => Malicious Domains => Topic started by: cconniejean on August 05, 2008, 10:12:26 am

Title: ipsupermarket.com
Post by: cconniejean on August 05, 2008, 10:12:26 am

Code: [Select]

http://www.ipsupermarket.com/
When trying to visit this page we are getting alerts.
There was 1 threat found.
Stop  DANGEROUS: LinkScanner Online has found
[WebAttacker]
Detail:  Exploit: WebAttacker

Went to finjan.com URL checker and they say the following:
Analysis Result: The requested URL was blocked due to the following reason:
Virus Detected! The page or file you requested is infected
with the following virus: Mal/ObJS-A

Title: Re: ipsupermarket.com
Post by: Kayrac on August 05, 2008, 10:28:39 am

Code: [Select]

http://sum4count.net/dl/188/win32.exeis one of the payloads
it changes which site the JS infection links to :|

and heres what it does(attached text file)

-Brian

Code: [Select]

http://add-block-filter.net/
is the hosting site of the js that transfers you

Title: Re: ipsupermarket.com
Post by: JohnC on August 07, 2008, 06:06:48 pm

Thanks.