websites compromised

[czy00]

Reference:
http://novirusthanks.org/blog/2009/11/more-than-100-websites-compromised-for-blackhat-seo-strategy/

Code: [Select]

[nobbc]
http://www.antifatiguekitchenmats.com/?q=bleach-244-english-sub
http://www.purplehorses.net/?page=bleach-244-online
http://archaeologychannel.org/Marketplace/ssl.php?t=bleach-244-raw
http://sanadahiroyuki.com/?clo=bleach-244-online
http://tampabaycharterfishing.com/dfd/index.php?a=bleach-episode-244-english-sub
http://www.wildsap.com/?kkk=bleach-episodes-244
http://www.flags.com/cache/?page=bleach-episode-244-english-sub
http://dancingbearsantiques.com/gde/index.php?a=bleach-episode-244-english-sub
http://www.ohiomm.com/?page=bleach-244-vosta
http://cubedir.com/rew/index.php?a=bleach-244-raw
http://www.fafica.com/?page=bleach%20243%20subbed
http://in-shops.gr/logon.php%3Fpage%3Dbleach-243-eng-sub
http://www.airlinemilescreditcards.net/btr/index.php?a=bleach-244-raw
http://sugarcreekgardens.com/gtr/index.php?a=bleach-244-english-sub
http://des84.com/?t=bleach-140-english-sub
http://1000z.digital-video-hd.com/in.php?n=4110918
http://blanshinblansh.net?uid=201&pid=3&ttl=614495a5344
http://thewindowguystexas.com/ytr/index.php?a=bleach-243-english-sub
http://bbs.6858dz.com/?t=bleach-244-raw
http://mqjbkq.xorg.pl/in.php?t=cc&h=bbs.6858dz.com&p=
http://campuslife.mn/?tost=bleach-episodes-244
http://goherdscan.com/?uid=14300
http://filosofia.gr/blogs/index.php?page=bleach%20243%20english%20sub
http://gynmed.gr/log.php?page=bleach-243-english-sub
http://fivleife.com/online/07c334f90ba270f479c39bc5c981d964/65cd1d5a9e8bfa579811de2bff5e0098/3656b9eddb95cfb9d7f013ed46b015a2
http://shop.3dtotal.com/images/%3Fpage%3Dbleach-244-english-sub
http://www.airlinemilescreditcards.net/btr/index.php?a=bleach-244-english-sub
http://posenharvest.com/gde/index.php?a=the-blind-side-true-story
http://gasparottconcreteinc.com/gde/index.php?a=women-with-mustaches
http://posenmi.org/gde/index.php?a=blizzard-store
http://communitytechalpena.com/gde/index.php?a=portland-maine-newspaper
http://cocosup.com/gde/index.php?a=mahmoud-vahidnia
http://saturnleague.com/mxbb/?kkk=bleach-244-english-sub
http://be-funk.com/?kkk=bleach-244-english-sub
http://crccapetown.co.za/?q=bleach-episode-244-english-sub
http://revistaelite.com/?topic=bleach-244-english-sub
http://www.fistfullofcomics.com/index.php?t=bleach-244-english-sub
http://rcw4a7.xorg.pl/in.php?t=cc&h=&p=
http://exodus110.com/?uid=195&pid=3&ttl=1144a5a5366
http://www.wrestlingexposed.com/faq.php?t=bleach-244-english-sub
http://goherdscan.com/?uid=14300
http://region12.depedonline.net/index.php?page=bleach%20243%20subbed
http://bleach-243-english-sub.americanmultimediastudios.com/?bleach%20243%20english%20sub
http://ranthong.com/game2/seed.php?bleach+232+english+sub
http://www.korea-dpr.com/catalog/user.php?p=bleach-episode-244-english-sub (fake video codec)
http://www.jakeshimabukuro.com/store/images/%3Fpage%3Dbleach-244-english-sub
http://www.japanexposures.com/shop/images/?page=bleach-episode-244-english-sub
http://revistaelite.com/?topic=bleach-244-raw
http://kirdabe.cn/?uid=14300
http://eqaofed.cn/?uid=14300
http://eqaone.cn/?uid=14300
http://secure-privacya.com/scan1/?pid=110s20&engine=
http://howtoprotectpc3.com/scan1/?pid=110s20&engine=
http://letmeguardyourzone.com/?p=
http://howtoprotectpc3.com/download.php?id=110s20
http://guardsystem-scanner.net/?p=
http://searchglobalsecurity.com/?p=http://www.plotguardto-mypc.com?p=
http://plotguardto-mypc.com/?p=
http://secure-pcprotection.net/?p=
http://webviruscheck5.com/scan1/?pid=110s20&engine=
spywareclean3.com
base-scanner3.com
spywareclean7.com
safe-softwarev.com
pc-protectiona.com
todo-zoneguard.net
downloadavr6.com
cathrynzfunz.com
downloadavr7.com
best-scan-pc.com
trucountme.com
best-scanpc.com
best-scan.com
coolcount1.com
downloadavr3.com
downloadavr6.com
masterhost.co.in
best-scanpc.org
best-scanpc.net
testavrdown.com
new-systemprotection.com
howtocleanpc2.com
security-info1.com
security-guide5.com
digital-video-hd.com
goscanmy-pc.net
togozone-guard.net
in5st.com
in5ch.com
in5id.com
[/nobbc]


[czy00]

Others:

Code: [Select]

http://adv-tecsystems.net/?topic=bleach-244-english-sub
http://gamerconnexion.com/viewmain.php?t=bleach-episode-244-english-sub
http://200mail.com/?j=bleach-episode-245
http://exodus120.net/?uid=195&pid=3&ttl=6164a5f6c42
http://santacruzsuspension.com/?j=bleach-episode-245
http://kazfybu.cn/?uid=14300
http://gvn5uf.xorg.pl/in.php?t=cc&h=adv-tecsystems.net&p=
http://goscanbar.com/?uid=14300
http://mustscan-zonenow.net/?p=


[czy00]

More..

Code: [Select]

http://4realzed.com/?page=bleach-244-english-sub
http://www.shopellesstudio.com/store/userfiles/?page=bleach-episode-244-english-sub
http://schrau.samods.org/faq.php?t=bleach-244-raw
http://www.icarusgold.com/Shop/images/?t=bleach-244-raw


[czy00]

The saga continue...

Code: [Select]

http://antyspywaressite.com/index.php?affid=92300
http://baotou-rareearth.com/txtdb/db.php?day_page=Bleach-247-English-Sub
http://a5q.ru/t.php
http://antyspywaressite.com/hitin.php?land=20&affid=92300
http://naebuyaguglu.xorg.pl/go/?bleach%20247%20english%20sub
http://www.claudiablackonline.com/?go=eloping
http://www.udmr.ro/foto.php?go=bleach%20247%20english%20sub
http://airgunadvice.net/?go=bleach%20247%20english%20sub
http://www.caminodesantiago.me.uk/forum/weather/?go=bleach%20247%20english%20sub
http://www.bonsainut.com/forums/forumdisplay.php?go=bleach%20247%20english%20sub
http://irmofwc.org/yus.php?go=bleach%20247%20english
http://www.ereaders.nl/oplader_voor_bebook?go=bleach%20247%20english%20sub
http://theapp.appstate.edu/index.php?go=bleach%20247%20english%20sub
http://thmvmnt.com/?q=bleach-247
http://www.twpa.org.uk/?topic=bleach-246-english-sub
http://bregrg.100webspace.net/levitt-zalupa-mala.html
http://www.caminodesantiago.me.uk/forum/camino-ingles/?go=bleach%20247%20english%20sub
http://cd-voile-morbihan.com/fxv.php?m=bleach247
http://jujuclub.co.uk/define.php?page=bleach-247
http://conversationsgalantes.com/?go=bleach%20246%20english%20sub
http://collegeapartmentguide.com/?t=bleach-246-english-sub
http://shawneenaz.org/?go=bleach%20episode%20246%20english%20sub
http://coosajo.com/portal/index.php?page=bleach%20243%20english%20sub
http://xtreemtv.co.ke/xlo.php?topic=bleach%20246%20sub
http://www.theunityartist.com/forum/index.php?page=bleach%20242%20english%20sub
http://proreforma.org.gt/logs/?bleach+235+english+sub
http://jujuclub.co.uk/define.php?page=bleach247
http://gomyd.com/educate/nycivics-101/nyc-council/?go=bleach%20247%20english%20sub
http://www.sneakerfreaker.com/shop/images/hot-news.php?page=bleach-247-english-sub
http://www.asmaki.com/?go=bleach%20247%20english%20sub
http://gomyd.com/2009/10/?go=bleach%20247%20english%20sub
http://thamaphla.go.th/14n/%3Fq%3Dbleach-fade-to-black-part-1-sub
http://formicidae.org/go.php?id=4&page=bleach-fade-to-black-part-1-sub&pid=108
http://hnobin.cn/go.php?sid=5&tds-parametr=bleach+anime+nude
http://grm-r.cn/tr/go.php?sid=5&tds-kw=bleach+episode+228
http://bookviet4a.org/2009/11/03?go=bleach%20246%20english%20sub
http://irmofwc.org/yus.php?go=bleach%20247%20english
http://www.cssj.org/moodle18/indx/?go=bleach+vs+naruto+online+game
http://10searchonline.info/test.php?id=/games5150909/bleach-vs-naruto-online-game
http://www.787787.com/tds/go/sid/3/q/bleach-cilp-hentai-905
http://damazomajak.org/?go=bleach%20246%20english%20sub
http://sdaf65dsfu87sd.com/?uid=195&pid=3&ttl=5124457793f
http://kwakma.com/tds/go.php?sid=1&tds-key=bleach+fade+to+black+part+1+sub&sref=
http://yourbillingupdate.com/movie.php?player=2&affid=31105
http://yourbillingupdate.com/hitin.php?land=42&affid=31105
http://superbillingsystem.com/index.php?affid=32200
http://superbillingsystem.com/downl
http://superbillingsystem.com/hitin.php?land=20&affid=32200
http://valuespywarescan.com/scan1/?pid=110s20&engine=%3DXQ1zDzuOTAuNDYuMTE2JnRpbWU9MTI1MTE3Ng0OaA%3DM
http://ryrug0.xorg.pl/in.php?t=cc&d=18-11-2009&h=collegeapartmentguide.com&p=
http://overmerit3.cn/?pid=110s20&sid=c371b3
http://sdaf65dsfu87sd.com/?uid=195&pid=3&ttl=5124457793f
http://ryrug0.xorg.pl/in.php?t=cc&d=25-11-2009_3&h=cd-voile-morbihan.com&p=
http://xpres-scan-onyourpc.net/?p=
http://ryrug0.xorg.pl/in.php?t=cc&d=18-11-2009&h=www.twpa.org.uk&p=
http://luckymedicalbilling.com/hitin.php?land=42&affid=34100
http://pcmedicalbilling.com/downl
http://pcmedicalbilling.com/oader.php?affid=92400
http://naebuyaguglu.xorg.pl/in.cgi?2&parameter=bleach%20247%20english%20sub
http://load1ng.com/in.cgi?2&seoref=
http://totds.com/in.cgi?2&seoref=
http://plzwait.info/in.cgi?2&seoref=
http://load1ng.com/in.cgi?2&parameter=bleach+anime&ur=1&HTTP_REFERER=
http://mangotraffic.com/in.cgi?2
http://madpornact.com/sutra/in.cgi?2&seoref=
http://the-first-five-pages.com/sutra/in.cgi?2&seoref=
http://search4us.us/in.cgi?2&seoref=
http://gaagle.name/12/in.cgi?2&seoref=
http://lvfinder.net/in.cgi?2&seoref=
http://skyyy.info/in.cgi?2
http://marakesh.info/tds/in.cgi?2&seoref=
http://st.seblg.com/in.cgi?2&parameter=
http://bestga.biz/in.cgi?12&group=2&parameter=
http://traffway.net/in.cgi?2&parameter=
http://rdfq.com/in.cgi?2&parameter=&se=unknown&said=groupsgo
http://tdska.net/in.cgi?2&parameter=
http://bestsearchengine.us/in.cgi?2&parameter=
http://securitytoolthanks.com/download.php?affid=60300
http://safetyscantool.com/download.php?affid=0000
http://freechinaonline.com/downloader.php?affid=31100
http://freechinaonline.com/movie.php?player=2&affid=31100
http://auditexperiment.com/hitin.php?land=42&affid=10866

some redirects points to:

Code: [Select]

http://www.topsearch10.com/search.php?aid=34073&q=bleach+247+english+sub

One file install.exe scan (TR/FakeAV):

Report Generated:   25.11.2009 at 23.30.05 (GMT 1)
Time for scan:   84 seconds
File Name:   install.exe
File Size:   1208897
MD5 Hash:   bab376901bf01d6320e40e6c52b6da29
SHA1 Hash:   1F9B7321CE468476EB6F92F8B826F9B2659C326A
Detection Rate:   2 on 24 (8.33%)
Status:   INFECTED

[czy00]

Reference:
http://novirusthanks.org/blog/2009/12/blackhat-seo-target-popular-video-streaming-websites/

Code: [Select]

http://www.fileaddiction.com/user2952/UAV%20Generator.exe
http://www.freedatatransfer.com/user4516/Knight%20Generator.exe
http://www.safehostingsolutions.com/user2467/Hpack%20Generator.exe
http://www.qualityupload.com/user3423/DBlocks%20Generator.exe

Files are mostly undetected

[czy00]

TDSS Trojan Family

Code: [Select]

http://freedownloadthanks.com/download.html
http://www.freedownloadthanks.com/user3925/LG%20Generator.exe -  BKDR_TDSS.SMA


[czy00]

Code: [Select]

http://geeklives.com/imk.php?topic=bleach%20248%20subbed
http://antivirussoftrock.com/index.php?affid=23500
http://antivirussoftrock.com/oader.php?a
http://teasmartgarden.com/cpw.php?go=bleach%20248%20english%20sub
http://softscanguardmy-zone.net/?p=
http://www.rs2-accounts.com/op.php?page=bleach-248-stream
http://kasx7y.xorg.pl/in.php?t=cc&d=03-12-2009_linew3&h=teasmartgarden.com&p=
http://pcregrtuy.net/?uid=195&pid=3&ttl=61841598756
http://antivirussoftadult.com/index.php?affid=92400
http://dugger.quad6.com/rni.php?page=watch%20bleach%20248
http://antivirussoftadult.com/oader.php?a
http://www.sneakerfreaker.com/shop/images/hot-news.php?page=bleach-247-english-sub
http://collegeapartmentguide.com/?t=bleach-246-english-sub
http://antivirussofttissue.com/index.php?affid=32200
http://securityexternaltools.net/oader.php?a
http://securityexternaltools.net/downl
http://luciagaggiotti.com/dmw.php?topic=bleach%20248%20sub
http://fightpassport.com/?ios=Bleach-247-English-Sub
http://1000z.digital-video-hd.com/in.php?n=2511094
http://blanshinblansh.net?uid=201&pid=3&ttl=61841598756
http://jujuclub.co.uk/define.php?page=bleach-247-sub
http://securitysoftstore.com/oader.php?a
http://securitysoftstore.com/index.php?affid=20199
http://www.mitmachim-onc-ichilov.org/?go=bleach+episode+246+english+sub
http://scootersnbikes.com/kar.php?t=bleach%20247%20english%20sub

Suspicious domains:

www.security-utility.net
globalsecuritydirect.com
newsecuritytools.net
pcmedicalbilling.com
bod11.i0waterford.net
securitytoolnow.com
securitysoftcore.com
securitytoolsclick.net
globalsecuritydirect.com
createfinancialstability.com
securityutilitysite.net
mail.thestabilitytest.com
mail.securitytoolsblog.com
yournecessary.com
thestabilitytest.com
securitytoolsblog.com
portsecurityutility.net
necessaryoils.com
superbillingsystem.com
securityutilityblog.net
thebillingaol.com
yoursafetysearch.com
securitytoolsuser.net
securityutilityshop.net
recordsmedicalbilling.com


[czy00]

Code: [Select]

http://www.lechia.only.pl/li.php?l=bleach+247+english+sub
http://mg1b.info/go2.php?s=xx062
http://infoladypick.cn/?pid=71&sid=f3b6e0
http://stream-scana.cn/scan1/?pid=71&engine=
http://www.plainsrailway.co.nz/trf.php?a=bleach-247-english-sub
http://slightinterruption.com/lpy.php?m=bleach%20247%20sub
http://mhp083.xorg.pl/in.php?t=cc&d=25-11-2009_2&h=slightinterruption.com&p=
http://pcregrtuy.net/?uid=195&pid=3&ttl=4134d59878d
http://softscanguardmy-zone.net/?p=
http://www.tertmay29.com/xr/in.php
http://airgunadvice.net/?go=bleach%20247%20english%20sub
http://thecolorartistry.com/trf.php?a=bleach-247-english-sub
http://mouseknight.rmca.org/nba.php?t=bleach%20248%20english%20sub
http://softscanguardmy-zone.net/?p=
http://scootersnbikes.com/kar.php?t=bleach%20247%20english%20sub
http://pcregrtuy.net/?uid=195&pid=3&ttl=4134d59878d
http://mhp083.xorg.pl/in.php?t=cc&d=02-12-2009_linew&h=mouseknight.rmca.org&p=
http://teasmartgarden.com/cpw.php?go=bleach%20248%20english%20sub
http://lakeland-lawns.com/?u=bleach+246+sub
http://mhp083.xorg.pl/in.php?t=cc&h=lakeland-lawns.com&p=
http://_pocketantivirustool.com/hitin.php?land=20&affid=32200 (offline)
http://joelharrisstudio.com/oxo.php?a=bleach%20248%20english%20sub


[czy00]

Code: [Select]

http://chronicdownload.com/download.html
http://airgunadvice.net/?go=bleach%20247%20english%20sub
http://comunicacionciudadana.org/chk.php?m=bleach%20247%20english%20sub
http://scootersnbikes.com/kar.php?t=bleach%20247%20english%20sub
http://powermari.com/fts.php?p=bleach%20248%20english%20sub
http://suzukihirt.hu/img/ewr.php?page=bleach-248-subbed
http://theusefularts.com/wkv.php?a=watch%20bleach%20248
http://boringboxes.com/rkt.php?a=watch%20bleach%20248
http://tighst.xorg.pl/in.php?t=cc&d=03-12-2009_linew3&h=boringboxes.com&p=
http://promt4lites.net/?uid=195&pid=3&ttl=71847589b31
http://www.fl.nctu.edu.tw/ba.php?ba=bleach+248+subbed
http://mg1b.info/go2.php?s=xx072
http://wiftycoin.cn/?pid=71&sid=f3b6e0
http://podcast.oaln.com/kuk.php?t=bleach%20248%20english%20sub
http://acts512.org/plc.php?a=bleach%20episode%20246%20english%20sub
http://bhartiliquor.com/shop/art.php?page=bleach-episode-246-english-sub
http://newsecuritysoft.net/movie.php?player=2&affid=33201
http://newsecuritysoft.net/downloader.php?affid=33201