Author Topic: Few unsorted - Part 3  (Read 23581 times)

0 Members and 1 Guest are viewing this topic.

July 26, 2008, 08:37:00 pm
Reply #15

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

July 27, 2008, 12:13:25 pm
Reply #16

sowhat-x

  • Guest
Quote
hxxp://bally1.bally-bally.net/laco1.exe
Up to...
hxxp://bally1.bally-bally.net/laco7.exe

hxxp://bally2.bally-bally.net/laco8.exe
Up to...
hxxp://bally2.bally-bally.net/laco14.exe

hxxp://bally3.bally-bally.net/laco15.exe
Up to...
hxxp://bally3.bally-bally.net/laco22.exe

hxxp://bally4.bally-bally.net/laco23.exe
Up to...
hxxp://bally4.bally-bally.net/laco35.exe

Newer downloader list that I've digged...
Quote
hxxp://www.guccia.net/prada.txt

Quote
hxxp://f.fff661.cn/max0.exe
hxxp://f.fff661.cn/max1.exe
And up to...
hxxp://f.fff661.cn/max40.exe

Quote
hxxp://mm119mkssd.cn/inte/yy1.exe
Up to...
hxxp://mm119mkssd.cn/inte/yy30.exe

Quote
hxxp://russarch.santrex.net/files/update.exe
hxxp://www.bhfer.cn/flasha.swf

Quote
hxxp://scan.wsp2008scanner.com/227/501/
hxxp://dwl.getwsp.com/load/setup_227_501_.exe
hxxp://dl.wspdl.com/get/?type=main&pin=227&lnd=501
hxxp://antispyguard-scanner.com/download/xpa_2008.exe
hxxp://antispyware2008soft.com/download.php?aff=1000
hxxp://cdn.bestdownloadsoft.com/mistikotitatuipologisti.com/MistikotitaTuIpologist/installer_gr.exe
hxxp://dl.internetsecuritydeluxe.com/en/download.php?landid=30&depid=maxc_isd08&cid=2271&parid=mc_548246151
hxxp://dl.internetsecuritydeluxe.com/en/InternetSecurityDeluxe.msi
hxxp://download.anvimaster.com/loading.php?actually=1&advid=0
hxxp://pc-cleanpro.com/download/4364/PCCleanPro_Installer_eng.exe
hxxp://spywatche.com/download.php?actually=1&advid=
hxxp://windows-virus-scanner.com/2009/download/trial/AV2009Install_0011.exe
hxxp://www.noadware.net/def/noadware4_072508.na.zip
hxxp://www.noadware.net/noadware.exe
hxxp://www.pc-antispy.com/download/4364/PCAntispy_Installer_eng.exe
hxxp://xlguarder.com/install.exe

July 27, 2008, 08:30:18 pm
Reply #17

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

July 29, 2008, 01:49:33 pm
Reply #18

sowhat-x

  • Guest
Quote
hxxp://groupxxxvideo.com/
hxxp://big-nipples.groupxxxvideo.com/
hxxp://big-black-cocks.groupxxxvideo.com/
hxxp://penises.groupxxxvideo.com/
hxxp://gay-ass.groupxxxvideo.com
hxxp://girl-naked.groupxxxvideo.com
hxxp://pussy-fingering.groupxxxvideo.com
hxxp://double-fisting.groupxxxvideo.com
hxxp://ass-sex.groupxxxvideo.com
hxxp://hentai-videos.groupxxxvideo.com
hxxp://sexy-naked-girls.groupxxxvideo.com
hxxp://plzwait.info/in.cgi?2&seoref=
hxxp://antivirus2009-freescan.com/2009/1/freescan.php?aid=880061
hxxp://secureexpertcleaner.com/
hxxp://download.secureexpertcleaner.com/CleanerInstaller.exe
hxxp://registrydoctor2008.com/
hxxp://download.registrydoctor2008.com/RGD_FreeInstaller.exe
hxxp://virusremover2008.com/
hxxp://download.virusremover2008.com/VRM_Free.exe
hxxp://pestsweeper.com/setup_en.exe
hxxp://87.118.117.138/ho.php
hxxp://195.24.77.223/utest/ip.php
hxxp://206.51.226.211/spm/s_alive.php?id=DEC&tick=DEC&ver=200&smtp=ok&task=DEC
hxxp://206.51.237.93/spm/s_alive.php?id=xxx&tick=xxx&ver=200&smtp=ok
hxxp://213.155.0.240/cgi-bin/index.cgi?da003bee0100f0600222f5cb90060b46d6d902926c3dce0003001e000000000801
hxxp://58.65.239.115/check/n14041.htm
hxxp://66.199.237.36/iii.exe
hxxp://78.109.29.112/ho.php
hxxp://brakecodec.net/download/brakecodec.v.5.099,.exe
hxxp://codecservice1.com/service/index.php
hxxp://codecservice3.com/service/index.php
hxxp://codecservice6.com/service/index.php
hxxp://countermediagroup.com/ho.php
hxxp://neiron2009.com/check/vers155.php?q=1
hxxp://root.51113.com/root.gif
hxxp://siteresults1.com/feed/get.php
hxxp://siteresults2.com/feed/get.php
hxxp://sum4count.net/pictures1/ztool1
hxxp://sum4count.net/pictures1/ztool2
hxxp://sum4count.net/pictures1/ztool3
hxxp://sum4count.net/pictures1/ztool4
hxxp://v74.org/ex/1.swf
hxxp://v74.org/ex/index.php
hxxp://v84.org/in.cgi?4
hxxp://www.google-moogle.net/acrobat/
hxxp://www.google-moogle.net/acrobat/good_ip.php
hxxp://www.yourfavoritetube.com/cd///wmcodec_update.exe
hxxp://xpsecuritycenter.com/install/Installer.exe

July 30, 2008, 01:53:57 pm
Reply #19

sowhat-x

  • Guest
Zomg-haxor -> open dir...  8)

Quote
hxxp://antivirus2009-freescan.com/2009/download/
hxxp://antivirus2009-freescan.com/2009/download/trial/AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/AV2009Install_.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup0607_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup0707_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080728-1731_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080728-1737_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080728-1740_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080728-2015_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080729-1117_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080729-1154_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080729-1755_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080730-1039_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080730-1044_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup080730-1435_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup0907_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup1007_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup1307_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backupAV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/backup_AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/not_crypted/AV2009Install.exe
hxxp://antivirus2009-freescan.com/2009/download/trial/crypts0307/_AV2009install(2).exe
hxxp://antivirus2009-freescan.com/2009/download/trial/crypts0307/_AV2009install(3).exe
hxxp://antivirus2009-freescan.com/2009/download/trial/crypts0307/_AV2009install(4).exe
hxxp://antivirus2009-freescan.com/2009/download/trial/crypts0307/_AV2009install(5).exe

Quote
hxxp://dwl.getwsp.com/load/setup_227_509_.exe
hxxp://dwl.wspdownload.com/load/setup_1_1_.exe

Quote
hxxp://download.aav2008.com/setup.php?actually=1&advid=29
hxxp://setup.regclean.com/setupxv.exe
hxxp://setup.antispywarebot.com/setupxv.exe
hxxp://download.antispywarebot.com/setup.exe
hxxp://download.errorsweeper.com/setup.exe
hxxp://download.regclean.com/setup.exe
hxxp://www.errorsmartdownload.com/setupxv.exe
hxxp://setup.adwarealert.com/setupxv.exe

Domain names of the "main" sites as well...
Quote
hxxp://scan.wsp2008scanner.com/227/509/
hxxp://sales.winspywareprotect.com/
hxxp://winspywareprotect.com/
hxxp://aav2008.com/
hxxp://adwarealert.com/
hxxp://restore-pc.com/download.php
hxxp://antispywarebot.com/
hxxp://regclean.com/

Quote
hxxp://fayhvkfnvu.com/dl/loadadv670.exe
hxxp://2005-search.com/go.exe
hxxp://ravup.kmip.net/iee.exe
hxxp://funny-pictures.com/desktopmate.exe
hxxp://trf-loader.org/trf/tools/calc.exe
hxxp://www.fenomen-games.com/dfiles/Concentration_dwn.exe
hxxp://www.smalltool.net/new.exe
hxxp://smart-security.biz/
hxxp://hotadulttube08.com/freemovie/1045/0/
hxxp://megabestsoftnah2008.com/soft/zadpdchbptl/eb97787c/MediaTubeCodec_ver1.1045.0.exe
hxxp://yourfavoritetube.com/cd/98/3/wmcodec_update.exe
hxxp://91.142.64.91/cgi-bin/news.cgi?user1
hxxp://91.142.64.91/cgi-bin/news.cgi?user2
hxxp://91.142.64.91/cgi-bin/news.cgi?user3
hxxp://91.142.64.91/cgi-bin/news.cgi?user4

July 30, 2008, 08:06:56 pm
Reply #20

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

July 30, 2008, 11:45:29 pm
Reply #21

sowhat-x

  • Guest
Quote
hxxp://216.93.188.81/drm/savenow/SecureInstall_LOFS020701Inst.exe
hxxp://217.73.66.1/minidialler/PR.exe
hxxp://62.21.83.40/~mariusz/webreporter/postcard.exe
hxxp://ads.z-quest.com/ax/83122.exe
hxxp://ads.z-quest.com/ax/acdt-pid67N.exe
hxxp://antivirusprotectionsite.com/download/platinumpartner/AntivirusProtection.exe
hxxp://cdn.downloadcontrol.com/files/installers/cab/SystemDoctor2006FreeInstall.cab
hxxp://cdn.downloadcontrol.com/files/installers/Install-Errorprotector-Free.exe
hxxp://cdn.downloadcontrol.com/files/installers/PCTurboProInstallerFree.exe
hxxp://cdn.downloadcontrol.com/files/installers/SystemDoctor2006FreeInstall.exe
hxxp://cdn.downloadcontrol.com/installprivacyprotectorfree.exe
hxxp://d.45so.com/download/A.exe
hxxp://deposito.trafficredlight.net/11679-23.exe
hxxp://deposito.trafficredlight.net/11680-23.exe
hxxp://dist.checkin100.com/1-fe5e180d56ed9c233080898276c260cc.exe
hxxp://dist.checkin100.com/mirar_distro_876260.exe
hxxp://doctor-antivirus.com/promo/at.exe
hxxp://doctorantivirus2008a.com/
hxxp://download.cdn.errorsafe.com/files/installers/cab/ErrorSafeNewReleaseInstall.cab
hxxp://download.cdn.errorsafe.com/files/installers/ErrorSafeFreeInstallW.exe
hxxp://download.cdn.winsoftware.com/files/installers/cab/WinAntiSpyware2006FreeInstall.cab
hxxp://download.cdn.winsoftware.com/files/installers/cab/WinAntiSpyware2007FreeInstall.cab
hxxp://download.cdn.winsoftware.com/files/installers/cab/WinAntiVirusPro2006FreeInstall.cab
hxxp://download.cdn.winsoftware.com/files/installers/cab/WinAntiVirusPro2007FreeInstall.cab
hxxp://download.cdn.winsoftware.com/files/installers/WinAntiSpyware2007FreeInstall.exe
hxxp://download.cdn.winsoftware.com/files/installers/WinAntiVirusPro2006FreeInstall.exe
hxxp://download.cdn.winsoftware.com/files/installers/WinAntiVirusPro2007FreeInstall.exe
hxxp://download.errorsafe.com/files/installers/ErrorSafeFree_new.exe
hxxp://download.errorsafe.com/files/installers/ErrorSafeFreeInstall.exe
hxxp://download.errorsafe.com/files/installers/ErrorSafeNewReleaseInstall.exe
hxxp://download.privacy-kit.com/privacykit_setup.exe
hxxp://download.uav2008.com/install.php?actually=1&advid=2654
hxxp://downloads.virusrescue.com/releases/5335/vr_setup_3_0.exe
hxxp://files-pl.starware.com/installs/links/entertainment.exe
hxxp://files-pl.starware.com/installs/links/jokes_en-gb.exe
hxxp://files-pl.starware.com/installs/links/music.exe
hxxp://files-pl.starware.com/installs/links/weatherstudio.exe
hxxp://files.dertion.com/dragracer/DragRacer-v3-Setup.exe
hxxp://k8l.info/ax/acdt-pid67N.exe
hxxp://ksn.a1001186.wrs.mcboo.com/17PHolmes.cmt
hxxp://ndhome.netvigator.com/~graceho3/u.exe
hxxp://pest-patrol.com/
hxxp://platinumpartner.com/software/AdwareRemover/SpyBase/spydb.exe
hxxp://qtas.net/mumie.exe
hxxp://sec.storageguardsoft.com/securepccleaner.com/SecurePCCleaner/installer_en.exe
hxxp://static.zangocash.com/Setup/Seekmo/Setup.exe
hxxp://uav2008.com/
hxxp://ucleaner.com/download/6010/MjI6Ojg5/UltimateCleaner_Installer.exe
hxxp://up.re7an.net/tmp378/cnf380/peper_0.htm ->  Fake Google virus alert page
hxxp://users.skynet.be/fa088362/gp/i.exe
hxxp://webspyshield.com/a/setup.exe
hxxp://www.crackfind.org/install.exe
hxxp://www.doctor2antivirus.com/promo/at.exe
hxxp://www.filefrog.net/images/jrP20166.jpg
hxxp://www.filefrog.net/images/V3n82028.jpg
hxxp://www.pest-patrol.com/distribs/1/pp_lite.exe (note: it's 'pest-patrol.com',not pestpatrol.com)
hxxp://www.ucleaner.com/download/6010/MjI6Ojg5/UltimateCleaner_Installer.exe
hxxp://xbs.mtree.com/mt/dialers/fc/MultiDistFC.CAB
hxxp://xbs.sea.mtree.com/mt/dialers/fc/MultiDistFC.CAB
hxxp://xbs.sea.mtree.com/mt/dialers/fc/UniDist.CAB
hxxp://y5k.pp265.com/ax/wmp11exe.exe

July 31, 2008, 03:53:29 pm
Reply #22

sowhat-x

  • Guest
Quote
hxxp://upa.netsool.net/laco1.exe
Up to...
hxxp://upa.netsool.net/laco7.exe
Quote
hxxp://upb.netsool.net/laco8.exe
Up to...
hxxp://upb.netsool.net/laco14.exe
Quote
hxxp://upc.netsool.net/laco15.exe
Up to...
hxxp://upc.netsool.net/laco22.exe
Quote
hxxp://upd.netsool.net/laco23.exe
Up to...
hxxp://upd.netsool.net/laco35.exe
Quote
hxxp://qxz7.cn/hb/1.exe
Up to..
hxxp://qxz7.cn/hb/26.exe
Quote
hxxp://58.53.128.61/new/new1.exe
Up to...
hxxp://58.53.128.61/new/new28.exe
Quote
hxxp://tta.netfeei.cn/aoo1.exe
Up to..
hxxp://ttd.netfeei.cn/aoo22.exe
Quote
hxxp://mm119mkssd.cn/inte/yy1.exe
Up to...
hxxp://mm119mkssd.cn/inte/yy30.exe
Quote
hxxp://soft.hohoye.com/adco1.exe
Up to...
hxxp://soft.hohoye.com/adco16.exe
Quote
hxxp://user.hohoye.com/adco17.exe
Up to...
hxxp://user.hohoye.com/adco32.exe

And some unsorted stuff as well...
Quote
hxxp://3876373tr.org/basiu/cfg.bin
hxxp://87.118.110.78/
hxxp://87.118.110.78/prxget.php?serv=
hxxp://91.203.92.18/progs/tcwaer/rkopgkbp.php?adv=adv502
hxxp://abc-powers.com/check/vers195.php
hxxp://acdedblshd.com/progs/tdarf/vwjjbss.php?adv=adv540
hxxp://albpda.freehostia.com/
hxxp://b6755.nb.host-domain-lookup.com/bins/int/sn_pkz.int
hxxp://brakecodec.net/download/brakecodec.v.1.109.exe
hxxp://candy-country.com/botcool/auth.php
hxxp://cjadmin.35k.net/cc/list.htm
hxxp://ctree.1gb.in/soft/ChristmasTree.zip
hxxp://digitalroute69.com/l.php?aid=381.25
hxxp://e18810.nb.host-domain-lookup.com/bins/int/9kgen_up.int
hxxp://H18303.nb.host-domain-lookup.com/bins/int/7k19_up.int
hxxp://incestmovs.net/movie.htm
hxxp://j25937.nb.host-domain-lookup.com/bins/int/upd_admn.int
hxxp://l.mezzicodec.net
hxxp://mezzicodec.net/ -> (note -> Fake CastleCops webpage)
hxxp://mortgages-4-all.com/check/versionl.php
hxxp://p4570.bins.lop.com/bins/int/9kgen_up.int
hxxp://policy-studies.cn/fbi_facebook.exe
hxxp://scanner.shredder-scan.com/5/?advid=511
hxxp://truemaybe.com/check/n14042.htm
hxxp://u9848.nb.host-domain-lookup.com/bins/int/kr3.int
hxxp://virus-quick-scan.com/?wmid=1017&l=12&it=2&s=5087
hxxp://www.ddellywwear.com/web/cfg.bin
hxxp://xscanner.shredder-scan.com/setup/file.php?xid=install_511_MHw1fDB8fHx8fHw_
hxxp://z12276.nb.host-domain-lookup.com/bins/int/tp_map16.int

August 02, 2008, 06:21:47 pm
Reply #23

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

August 04, 2008, 05:39:02 pm
Reply #24

sowhat-x

  • Guest
Quote
hxxp://online-xpcleaner.com/download/XPcleaner_v880011.exe
hxxp://windows-scannernv.com/2008/trial/XPAinstall_881234.exe
hxxp://virus-webscanner.com/XPantivirus2008_B28.exe
hxxp://virus9-webscanner.com/2009/download/trial/AV2009Install_0011.exe
hxxp://stat.axpfixer.com/download/AdvancedXPFixerInstaller.exe
hxxp://www.axpfixer.com/
hxxp://axpdefender08.com/download/AdvancedXPDefenderInstaller.exe
hxxp://stat.malwareprotector08.com/download/MalwareProtector2008Installer.exe
hxxp://malwareprotector08.com/
hxxp://stat.av-xp-08.com/download/AntivirusXP2008Installer.exe
hxxp://www.av-xp-08.com/
hxxp://spywareisolator.com/spywareisolator_installer.exe
hxxp://power-antivirus-2009.com/setup/Install.exe
hxxp://vipantispy.com/setup_en.exe
hxxp://vipantispyware.com/setup_en.exe
hxxp://trace-sweeper.com/files/tracesweeper_setup.exe
hxxp://windows-privacy-protection.com/
hxxp://spymaxx.com/download.php?aid=
hxxp://antispystorm2008.com/download.php?aid=
hxxp://casinobigbonus.com/data/
hxxp://casinobigbonus.com/SmartDownload.exe
hxxp://casinobigbonus.com/data/ip0.php?name=
hxxp://66.232.98.112/spm/s_tasks.php?id=DEC&ver=203
hxxp://196.32.220.3/video-nude-anjelina.avi.exe
hxxp://www.tubescollection.com/m5/index.php?id=1114&n=teen&a=SatyrIconIc&v=928400.666
hxxp://www.releasedvideo.com/download.php?id=1114
hxxp://red-codec.net/download/red-codec.exe
hxxp://0bucksforpornmovie.com/freecontent/

August 06, 2008, 03:16:23 am
Reply #25

sowhat-x

  • Guest
Quote
hxxp://pua.tianshia.net/push1.exe
Up to...
hxxp://pud.tianshia.net/push35.exe

Quote
hxxp://www.bcfti.cn/update.exe
hxxp://www.bvhui.cn/update.exe
hxxp://www.cfgyu.cn/update.exe
hxxp://www.dfery.cn/update.exe
hxxp://www.juiyv.cn/update.exe
hxxp://www.mnufg.cn/update.exe
hxxp://www.rtfvg.cn/update.exe
hxxp://www.tirws.cn/update.exe
hxxp://www.vbklo.cn/update.exe
hxxp://www.xcyhb.cn/update.exe

Same hash in all update.exe crap:
MD5 - CF325A3F3D7DD2A2538B51A53535B701

Quote
hxxp://a1.nlloaa.net/adco1.exe
Up to...
hxxp://a1.nlloaa.net/adco16.exe
Quote
hxxp://b2.nlloaa.net/adco17.exe
Up to...
hxxp://b2.nlloaa.net/adco32.exe

Quite a few exploit packs among the following...
Quote
hxxp://win-defender.com/SmalInst.php?sid=st&gid=st
hxxp://dl1.pyroantispy.com/d/1/pyrodistrib.exe
hxxp://download.online-scanning-computer.com/download/AntvrsInstall.exe
hxxp://www.emexdobrasil.com.br/web/orkut.com/album.orkut.com.exe
hxxp://www.emexdobrasil.com.br/web/youtube.com/watch.youtube.com.exe
hxxp://www.versatilite.com.br/web/youtube.com/watch.youtube.com.exe
hxxp://196.32.220.3/alex/c.exe
hxxp://196.32.220.3/s4/a.exe
hxxp://196.32.220.3/s4/e.exe
hxxp://196.32.220.3/0.exe
hxxp://seivomerutam.info/spam/
hxxp://red-codec.net/download/red-codec.v.3.191.exe
hxxp://hotxxxadult.com/gertrude/96188711/1/player.php?m=Y2xpcF8xMC53bXY=&id=1000
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB0005300831475D
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB0005306592A8BE
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB00053032516374
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB000530486D8399
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB00053089B5CCE3
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB000530E40E243A
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB000530E8071A2C
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C0000004666000000007600000642EB00053041667A8F
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB000530668CA1B6
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C0000004666000000007600000642EB000530B9E3F70C
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C0000004666000000007600000642EB000530A9D7EC00
hxxp://66.96.214.197/40E8001430303030303030303030303030303030303031306C000000466600000001760000005CEB0005300B354B60
hxxp://wolmos.com/templates/Default/images/zone.php
hxxp://tulipes.ru/images/
hxxp://ini7.com/lc10092.html
hxxp://3pigs.info/t/?
hxxp://google-analystyc.com/in.cgi?ch777&ead779
hxxp://5foot.net/t/
hxxp://sum4count.net/strong/184/?5d529f
hxxp://tr.sforge.info/ts/in.cgi?client049&a9f4ef
hxxp://208.72.168.176/e_049_11/index.php
hxxp://polanddreams.com/check/versionl.php
hxxp://codechost.com/codecpack.v.1.0.141.exe
hxxp://1st-tube.com/teens/index.php?id=141
hxxp://pressdownloadtostart.com/exe2/3913162.exe
hxxp://onlythebestvid.com/exclusive2/id/3913162/1/black/white/
hxxp://tdsin.info/std/go.php?sid=4
hxxp://sltest.info/tds/go.php?sid=4
hxxp://megabestsoftnah-2008.com/soft/zusdcghktcg/44500587/MediaTubeCodec_ver1.1513.0.exe
hxxp://hotadulttube08.com/amateur/1/2/042d97/1513/0/
hxxp://91.203.68.14/vip/
hxxp://91.203.68.14/sory/dtyeryeras.js
hxxp://ieskok.info/in.cgi?6&seoref=
hxxp://www.watchnenjoy.com/index.php?id=1273&style=white
hxxp://www.handmadeclips.com/m4/index.php?id=1273
hxxp://www.releasedvideo.com/download.php?id=1273
hxxp://realonlinevideo2008.com/movie/blue/0/21/1202/3/
hxxp://technichost.info/tech/go.php?sid=1
hxxp://onlinetube.info/tds/go.php?sid=1
hxxp://amateur.niche-planet.com/install.php?uid=2940e79305b3abae9869d310e5a52f3c
hxxp://monsterlink.org/spl/index.php
hxxp://www.ptp4ever.net/banniere.php?ref=freakout&fond=white
hxxp://red-caviar-kamchatka.com/spl/index.php
hxxp://svchost.us/spl/index.php
hxxp://vebalo.com/spl3/index.php
hxxp://vebalo.com/sbt/index.php
hxxp://mysploit.biz/fi/index.php
hxxp://searchtimes.com/index.php?AID=66285
hxxp://cdpuvbhfzz.com/dl/adv578.php
hxxp://try-count.net/strong/035/
hxxp://mdfc.info/

August 07, 2008, 12:20:07 am
Reply #26

sowhat-x

  • Guest
Only few rogues for today...
Quote
hxxp://download.fast-pc-scanner-online.com/download/AntvrsInstall.exe
hxxp://win-antivir-2008.com/a/Install.exe
hxxp://win-defender.com/SmalInst.php?sid=st&gid=st
hxxp://antispyspider.biz/files/antispyspider.msi
hxxp://spyzooka.net/download/spyzookasetup.exe
hxxp://malwscan.com/download.php?actually=1&advid=
hxxp://winxprotector.com/setup/file.php?xid=install_511_MHwwfHx8fHx8fA_
hxxp://download.winxdefender.com/defender_setup.exe
hxxp://spyware-sweeper.net/download.php?actually=1&advid=
hxxp://adwareremover2007.com/download.php?actually=1&advid=
hxxp://magicantispy.com/download.php?actually=1&advid=
hxxp://xscanner.malwarealarm.com/a/Install115.exe

August 07, 2008, 12:45:10 pm
Reply #27

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
Ruining the bad guy's day

August 07, 2008, 01:25:04 pm
Reply #28

Kayrac

  • Guest
rix.exe downloads fake antivirus/rogue programs

didn't see any 'sending' of data, but i'm no expert and didn't let it run very long :)

-brian

no time to check out the other but perhaps later

August 07, 2008, 07:31:54 pm
Reply #29

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964