Keeping a focus upon „New“ MW-Sites (?)

[GaryDee]

Code: [Select]

http://game-hidden-object.com/
http://www.mywot.com/en/scorecard/game-hidden-object.com

Links to games as from f.ex. :

http://www.alawar.com/download/1912TitanicMystery_15369.exe

http://128.111.48.236/domain.php?hash=f22e418a5bc93f472b4fc7bed6092f18&type=js

http://128.111.48.236/view.php?hash=c9e88289b10269cb6019a2b496f0fa74&t=1334429373&type=js

https://www.virustotal.com/url/20a4b8331274409a0da73f390126135511637688348d58aef67cfb108483587b/analysis/1334429176/

[GaryDee]

Weird Stuff:

Google & Elgoog ?

Code: [Select]

http://furikk.ru/
http://zekur.ru/
Nice is:
http://www.UnmaskParasites.com/security-report/?page=furikk.ru
http://www.UnmaskParasites.com/security-report/?page=zekur.ru

And the difference:
furikk.ru has /
zekur.ru ---> ok-zerkalo.ru ---> http://www.mywot.com/en/scorecard/ok-zerkalo.ru

[GaryDee]

Code: [Select]

http://www.pressmash.org/
appears also in connection to the MW-Domain

Code: [Select]

xn----7sboorocikaf8a1c.xn--p1ai
https://www.virustotal.com/url/ef638476852298afb83c170e61f27a6c7a1976a9734b695cc44954d38868a9c1/analysis/1334488025/
http://128.111.48.236/domain.php?hash=d900dd5502560153d0e6e2fd4f680150&type=js

[GaryDee]

Code: [Select]

http://forp-eng.com/
http://128.111.48.236/domain.php?hash=b123f985ee143fc131812f74aa188306&type=js
https://www.virustotal.com/url/4ecd33e5df6365534e4075f0d7c2c10f5f275d2421e75f966f77d3a4e6913700/analysis/
http://www.unmaskparasites.com/security-report/?page=http%3A//forp-eng.com/

in connection to

Code: [Select]

combinebet.cn
https://www.virustotal.com/url/fd44c2e8263f30c1b18a6daf28f50e75c066d5914bfbf9381ffe3ca82fe19e49/analysis/1334492436/
http://128.111.48.236/domain.php?hash=b11c5a09636f1a7cb3088c94f8cbe8b5&type=js

and

Code: [Select]

www.forp.ru
http://www.unmaskparasites.com/security-report/?page=http%3A//www.forp.ru/

[GaryDee]

Caution here:

Code: [Select]

http://www.enil.pl/
as the link enil.pl is found on the domain

Code: [Select]

http://krys-bet.pl/
Maybe a future MW-Domain. See also:

https://www.virustotal.com/url/a3d78fbd3353046eb2caaeb38f2d7a4116fe91f17923683f4449f81a329f0218/analysis/
http://128.111.48.236/domain.php?hash=a215c3fa735ca370e821037debc6de28&type=js
http://www.mywot.com/en/scorecard/krys-bet.pl

[GaryDee]

Code: [Select]

http://anuslingus.fr/
together with

Code: [Select]

http://guepiere.fr/
is hosted by the same as

http://128.111.48.236/view.php?hash=49de97148d449187051e83fb1655fc34&type=js

[GaryDee]

Code: [Select]

http://bosanoga.eu/
HEUR:Trojan.Script.Iframer

http://128.111.48.236/view.php?hash=a3164b85920818f721734f30bb19d4a9&t=1334638919&type=js

[GaryDee]

Code: [Select]

http://www.psychiatra-psychoterapeuta.pl/
HEUR:Trojan.Script.Iframer

http://128.111.48.236/view.php?hash=96a8b3ead77a9f4ace16c53ac3218160&t=1334640577&type=js

[GaryDee]

Code: [Select]

http://s-dach.bydgoszcz.pl/
HEUR:Trojan.Script.Iframer

http://128.111.48.236/domain.php?hash=a77d462534475c19b1f5bf960fbac818&type=js

[GaryDee]

Code: [Select]

http://favoclick.com/file/casttipv3_install.exe
not-a-virus:AdWare.Win32.PopAd.nv
Win32:Dropper-gen
TROJ_GEN.R42C3AR

https://www.virustotal.com/file/6cb51460784cb67261dc0ddce3749a4ed7ae1d7524aa4cb2418cd0845fc33480/analysis/1334747947/

[GaryDee]

Code: [Select]

http://down.favomark.co.kr/favomark_install.exe

https://www.virustotal.com/url/db36dad2fd1d3ba47af323d1a23db6b03be3c74cc346f85ef62ed5c841eec1b1/analysis/1334749321/
https://www.virustotal.com/file/f9dcc59b808bf09ae41fac62c763bdd7a89e606b285a269dc34b4a834f40aef0/analysis/1334749325/

TrojWare.Win32.Clicker.irq0
TrojanClicker:Win32/Delf.U
Trojan-Clicker.AA!IK

Code: [Select]

http://down.favomark.co.kr/favomark_uninstall.exe
https://www.virustotal.com/url/f31b89161c58f176e6f5a1d9b4122b336a63f830968debc40885070610faf4f7/analysis/1334749723/
https://www.virustotal.com/file/9dd15172c87fb6908cab38a1c46d5397357f7331d6e112585d5f97f0dfe8d2ab/analysis/1334749727/

W32/Smalltroj.WWUO

[GaryDee]

Code: [Select]

mysecure.co.kr
http://update.mysecure.co.kr/msc_gsetup.exe
Adware/MyPCCheck.A.4
a variant of Win32/Adware.MyPCCheck.A
suspected of Trojan.Downloader.gen.h


https://www.virustotal.com/url/681676a9cb28e2259d906c42f96fdd30660612d1129cc4faa66e32b2858e9f27/analysis/1334822070/
https://www.virustotal.com/file/205b268c6d0ea6c4f5091aec606ae0e0fbeecee9cb4951a968681b0949dd7667/analysis/1334822086/
http://128.111.48.236/view.php?hash=1af65062866d9b07016877b2b8a1cfec&t=1334822080&type=js

[GaryDee]

Code: [Select]

http://939.co.kr/ezHelpClient.exe
Trojan.Agent-266231
Heuristic.BehavesLike.Win32.Fake.O

https://www.virustotal.com/file/5ed86589bc4f9388b6312df3064e32124fc94bdf498f0e87bb20c1b9a636eb26/analysis/1334839137/

[GaryDee]

Code: [Select]

http://cupfile.com/down_fs/tax_vat_cfsetup_1167_2.exe
Application.Generic.398687
suspected of Trojan.Downloader.gen.h
Trojan.Win32.Generic!BT

https://www.virustotal.com/file/ca994f1a41f85057923e4f261985c6d1765b5c5614e93bd5fd3a82c9d791ed39/analysis/1334851688/

[GaryDee]

Code: [Select]

http://www.onbar.co.kr/update/Public/onbar21/onBar_Setup.exe
Trojan.Downloader.JOQI
Win32:Spyware-gen [Spy]
Skodna.Generic.CC

https://www.virustotal.com/file/3c92a8de7d301afef4b7039891ef2b6e54389e061890aff0bbfae73f1c9b9251/analysis/1334853191/