daily something......

[SysAdMini]

Code: [Select]

toppharma.net/123/sorted/pr/system
pixion.nl//foto/gallery/lente/images/systemhttp://wepawet.cs.ucsb.edu/view.php?hash=a247ae9bf05e543a750c686e75f3455b&t=1234013661&type=js

Code: [Select]

medamphetamin.cn/fffxxx3/http://wepawet.cs.ucsb.edu/view.php?hash=ea313d55e625a0d576848943a6165b9f&t=1234038737&type=js

[sparsha]

Sites involved in distributing Rogue Security applications

Code: [Select]

System-tuner.com
Systemsecurityse.com
Electronicbillinghost.com
Securesoftwarepays.com
Xpyburner.com
Xpyburnerpro.com
Hdrivesweeper.com
Hdrivesweeperpro.com

antispyware3000.net

Antivirus2009plus.com
rapidantivirus-09.com
rapid-antivirus-2009.com
rapidantivirus-2009.com
rapid-antivir2009.com
rapidantivirus2009.com
rapidantivirus09.com
extraantivir.com

ie-security-config.com
virus-doctor.com


[SysAdMini]

Code: [Select]

http://xapaxapa.ru/todance1/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=e61e2bc83427a3c841a6ff970b76e249&t=1234120297&type=js

[sparsha]

Antivirus 2009 related sites..

Code: [Select]

http://laspaceevents.cn/soft.php?aid=0182&d=1&refer=289ce6417
http://malwareprosecurityscanner.com/promo/1/freescan.php?nu=880182&back==TQw1TD3NEMMMI=O
http://malwareprosecurityscan.com/promo/1/freescan.php?nu=880553&back==zQ02jD3NEMMMI=M


[sparsha]

Rogues

Code: [Select]

xpvirusprotection.com
totalmalwareprotection.com
totalvirusprotection.com
Xpvirusprotection2009.com
malware-doc.com


[sparsha]

Code: [Select]

av1-download.info
av1-site.info

http://downloads.anti-virus-2010.info/en/exe/StageThree.exe
http://downloads.anti-virus-2010.info/en/exe/StageTwo.exe
http://downloads.anti-virus-2010.info/en/exe/svchost.exe
http://downloads.anti-virus-2010.info/en/exe/QWProtect.dll



[sparsha]

Code: [Select]

http://antivirus1-site.info/install.php
http://antivirus1-download.info/en/exe/install.exe


[SysAdMini]

Code: [Select]

www.luckffxi.comhttp://wepawet.cs.ucsb.edu/view.php?hash=8e2190d1410d684b1b814a39b62288bb&t=1235188110&type=js

Code: [Select]

web.114baines.com/1/index.htmhttp://wepawet.cs.ucsb.edu/view.php?hash=71c5258f6e3d469fabbe0eb372636e40&t=1235188376&type=js

Code: [Select]

www.hynno8744.cn/1/index.htmhttp://wepawet.cs.ucsb.edu/view.php?hash=dd7e0777ff2996e20f947903e874c8b0&t=1235188509&type=js

Code: [Select]

down.114anhui.com/1/index.htmhttp://wepawet.cs.ucsb.edu/view.php?hash=d912a96fa590ecfad9a77d60ca4fbcb8&t=1235189761&type=js

Code: [Select]

www.ffxionlion.com/download/ffxi.exehttp://www.virustotal.com/analisis/4e769eda073397abb033c663022d1ad4

Code: [Select]

/www.ffxionlion.com/download/wow.exehttp://www.virustotal.com/analisis/5f1fb36b313ecea141a217e086fe02b9

Code: [Select]

www.ffxionlion.com/download/mj.exehttp://www.virustotal.com/analisis/42ec3ff4dcc6e56fa05951228b43de41

[SysAdMini]

Code: [Select]

reddii.ru/traffic/sploit1/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=98857f2f00af684e185cdc1c165030a2&type=js

[sparsha]

Code: [Select]

xp-police-antivirus.com
Xp-police-2009.com
Xp-police-av.com
Xp-police-engine.com
xp-police-09.com

http://files.msdownloadsav.com/codec/codec_200002.exe
http://dl.msantivirstorage.com/get/?pin=200002&lnd=-1&type=main
http://int.ms-asreport1.com/dom1.php


[SysAdMini]

Code: [Select]

hxxp://cccbbbb.cn/1/rr.htmhttp://wepawet.cs.ucsb.edu/view.php?hash=a4d9fe888d4104e456afe2dd8df1367e&t=1235400090&type=js

[sparsha]

Code: [Select]

http://stabilityinternetworld.com/download.php?affid=00000
http://stabilityinternetworld.com/install/installpv.exe
http://scanstabilityonline.com/download.php?affid=08100


[sowhat-x]

Few Pinches...

Code: [Select]

hxxp://avto-mashine.freehostia.com/
hxxp://likrion.ho.ua/1.php
hxxp://maxi163.far.ru/maxi/maxi.php
hxxp://rus-shop.info/gate.php
hxxp://test.bboys.tu2.ru/gate.php
hxxp://thelogofpinch.freehostia.com/gate/gate.php
hxxp://www.cybertm.tu1.ru/admin/admin.php
hxxp://www.patr0n87.tu2.ru/reports/gate.php
hxxp://www.teploplast-nn.ru/admin/admin.php
hxxp://www.tihvin.tu2.ru/italy/gate.php
hxxp://ykosty.freehostia.com/gate/

[SysAdMini]

Code: [Select]

ultradant.cn/dis9/index.php
http://wepawet.cs.ucsb.edu/view.php?hash=bd77359c919df7385285588e2409df84&t=1235675351&type=js

http://www.virustotal.com/analisis/8222b3a4b72a2b49f689099ff81406b6 14/39

Code: [Select]

http://divinets.cn/z/5.htmcontains encoded iframes

Code: [Select]

211.95.79.58/y/index.phpmany exploits
http://wepawet.cs.ucsb.edu/view.php?hash=5648ff6fc1ba1b43bcf2d7abc6770be4&t=1235473451&type=js

Code: [Select]

dvcd.info/evo/count.php?o=2
flash exploit dvcd.info/evo/exploits/x19.php?o=2&t=1235675434&i=1081047572
pdf exploit dvcd.info/evo/exploits/x18.php?o=2&t=1235675434&i=1081047572
exe dvcd.info/evo/getexe.exe?o=2&t=1235675434&i=1081047572&e=18
flash http://wepawet.cs.ucsb.edu/view.php?hash=c99916c1ad66815a48271f48f8e2db7a&type=swf
pdf http://wepawet.cs.ucsb.edu/view.php?hash=4d136b35fb9c3c50f1a7216b40bed9ed&t=1235677319&type=js
exe http://www.virustotal.com/analisis/3c3290226366784976aeb0c69f9c1517 21/39

Code: [Select]

prororo7.net/sp/index.php
prororo7.net/sp/s/f.pdfhttp://wepawet.cs.ucsb.edu/view.php?hash=400499d9ab35a63f39552b25f9e04fbd&t=1235678776&type=js
http://www.virustotal.com/analisis/5b9a8bb60a602e71ea377e51ced56aaa 27/39

Code: [Select]

toureg-cwo.ch/fta/index.phpexploits/zbot
http://wepawet.cs.ucsb.edu/view.php?hash=66bab88192d8490d32e5c60a30231555&t=1235679132&type=js
http://www.virustotal.com/analisis/24b84a42c57c90a1a9dc69c8ae91dd1d 9/38

Code: [Select]

gavai-pegc9.ws/bI/index.phpexploits, redirects to toureg-cwo.ch

[SysAdMini]

Code: [Select]

findrosain.ru/find/http://wepawet.cs.ucsb.edu/view.php?hash=3c0b4261f5467c208d1c8bd07a2e9a0f&t=1235747603&type=js

Code: [Select]

findrosain.ru/lovehttp://wepawet.cs.ucsb.edu/view.php?hash=b2636ac6565fdc94e9e2a19cf46941d7&t=1235833030&type=js