daily something......

[sparsha]

Av2009 and Av360 Throwaway sites

Code: [Select]

http://thebestworldparty.cn/soft.php?aid=0479&d=1&refer=9d9cbe78e
http://proantimalwarescan.com/promo/1/freescan.php?nu=880479&back==

http://spaceindustrial.cn/soft.php?aid=0182&d=1&refer=289ce6417
http://prosystemonlinescanner.com/promo/1/freescan.php?nu=880182&back==

http://worldcommercialbusiness.cn/soft.php?aid=0553&d=1&refer=d58bf6d15
http://pro-antimalware-scanner.com/promo/1/freescan.php?nu=880553&back==


[SysAdMini]

Exploits/trojan

Code: [Select]

breakingnews.usnewnews.com/liveinternet.js
breakingnews.usnewnews.com/fresh/index.phphttp://wepawet.cs.ucsb.edu/view.php?hash=7ebea0ac579a5d9ca9e3156a662749e8&t=1235819223&type=js
http://www.virustotal.com/analisis/8eb587635d3bad9d37b9a5e7b06d2389

[SysAdMini]

Code: [Select]

an92.net/myy/index.php
pdf exploits

Code: [Select]

an92.net/myy/firefox.pdfhttp://www.virustotal.com/analisis/3089407073a361a9f3091e57ffbe3c99 16/39
MD5...: 61ac62ef2879e4ce1682f730f2015f09
http://wepawet.cs.ucsb.edu/view.php?hash=5eb164252fc11870b11a94b37f3f4394&t=1235921432&type=js

Code: [Select]

an92.net/myy/firefox2.pdfhttp://www.virustotal.com/analisis/574194324cf37f372fb6fba43c282458 14/38
MD5...: 24ca3bb5e3843ad86fb8302f97cc709a
http://wepawet.cs.ucsb.edu/view.php?hash=742f6815506fe5158de1caf392d33025&t=1235921582&type=js

payload

Code: [Select]

an92.net/myy/load.php?xpl=pdf&browser=Firefoxhttp://www.virustotal.com/analisis/0e6347a92768298244d2a1969bc70fd4 4/39
MD5...: c0e86259278d8e3dba3fe346866022da
http://www.threatexpert.com/report.aspx?md5=c0e86259278d8e3dba3fe346866022da

requests

Code: [Select]

bucefal.org.ua/bro/ld.php?v=1&rs=76487-337-8429955-226141824245000&n=1&uid=1Emo-loader

[SysAdMini]

pdf exploit

Code: [Select]

www.kuplon.biz/smun/pdf.php?id=2435&vis=1http://www.virustotal.com/analisis/47e606a0b63ebf3bcf819440f0da1441 13/39
MD5...: f1e5aa71ff2f65a7cf553ee011e2632c
http://wepawet.cs.ucsb.edu/view.php?hash=f66f78791092123d5e7989f47b548aa8&t=1235925405&type=js

payload

Code: [Select]

http://www.kuplon.biz/smun/load.php?id=2435&spl=69http://www.virustotal.com/analisis/c90c5ce9e2386722d6c21b38e5888c76 3/39
MD5: b0acf2f559db5d993ff720a74febdc83

[SysAdMini]

pdf exploit

Code: [Select]

www.geodll.biz/ar/spl/pdf.pdf
setcontrol.biz/ar/spl/pdf.pdfhttp://www.virustotal.com/analisis/36622b4ff10e0293f3ed1b8e724d8a7c 6/39
MD5...: 647da8d2ee1213926331077babafb8e4
http://wepawet.cs.ucsb.edu/view.php?hash=a36fd77906ead994adcb7256c8be4a8c&t=1235928293&type=js

payload

Code: [Select]

geodll.biz/ar/exe.phphttp://www.virustotal.com/analisis/fb7fc693aa7b63865d25628f17b4bb0c 11/38
MD5...: e8034060f4e05f9e461faf7e139f2f5d

[SysAdMini]

Code: [Select]

vsedlysna.ru/img/site/2/?viagrahttp://wepawet.cs.ucsb.edu/view.php?hash=b0807cd3d6f0c516fbd64a54e58ff0d2&t=1236073833&type=js
http://www.virustotal.com/analisis/9ff9a32c276bbcd97b2119a79312bce2

[sparsha]

Malware Defender 2009 rogue related sites:

Code: [Select]

http://easywinscanner17.com/sysgd09_2/3/10284
MalwareDefender2009.com
http://gomaldef09.com/buy.html?track_id=10001&bill_id=0

http://89.149.251.181/maldef09/install.php?track_id=10284
http://89.149.251.181/maldef09/setup.php?track_id=10001
http://78.159.99.58/maldef09/install.php?track_id=10511



[sparsha]

Av360 Throwaway sites contd...

Code: [Select]

http://whereismat.cn/soft.php?aid=0182&d=1&refer=289ce6417
http://falloutneferwin.cn/soft.php?aid=0468&d=5&refer=bb916128e
http://whreismyplugnplay.cn/soft.php?aid=0560&d=1&refer=b8ced57fa
http://softwareoverworld.cn/soft.php?aid=0553&d=1&refer=d58bf6d15

http://fastantimalwarescan.com/promo/1/freescan.php?nu=880553&back==jQ20zj0NIMNMI=M
http://fast-antimalware-scanner.com/promo/1/freescan.php?nu=880182&back==DQ52zj0NIMMMI=M
http://fast-antimalware-scan.com/promo/1/freescan.php?nu=880468&back==zQ01Dj0NIMNMI=M



[sparsha]

Code: [Select]

Advancesoftpc.com
Antispywarepro.net
scanspywareonline.net
Pcspeed-up.com

http://www.netspywarescan.com/online-scan.html?ewmid=225


[bobby]

Code: [Select]

http://easywinscanner17.com/maldef09_1/4/10242
http://fastantimalwarescan.com/promo/1/freescan.php?nu=880017&back=%3DTQ55jj2NAMNMI%3DO

[sparsha]

Av360 Throwaway sites contd...

Code: [Select]

http://advertisechoice.cn/soft.php?aid=0182&d=1&refer=289ce6417
http://vivaldinaruto.cn/soft.php?aid=1001&d=1&refer=184b911aa
http://awardspacelooksbig.cn/soft.php?aid=0468&d=5&refer=bb916128e


http://bestantimalwarescanner.com/promo/1/freescan.php?nu=880182&back==DQw3zj4NcMMMI=O
http://bestantimalwarelivescan.com/promo/1/freescan.php?nu=880468&back==TQ0xzj4NcMMMI=M
http://online-antimalware-scanner.com/promo/1/freescan.php?nu=881001&back==DQywDj3NAMNMI=O

ANG AntiVirus 09 rogue related

Code: [Select]

Angantivirus-2009.com
Angantivirus2009.com


[SysAdMini]

Av360 Throwaway sites contd...

Code: [Select]

trustedpaymentsystem.com
antivirus360-protection.com
liveantivirusscanner.com


[SysAdMini]

exploits/zbot

Code: [Select]

4you.vippif.comhttp://wepawet.cs.ucsb.edu/view.php?hash=f73ece587f4d906b256f108bbdb486c9&t=1236954537&type=js

[sowhat-x]

hxxp://213.155.10.56/exe2/3913960.exe
hxxp://213.163.65.9/codec/140.exe
hxxp://asiametal.biz/tds/in.php
hxxp://dbs-softportal.com/viewtubesoftware.40016.exe
hxxp://fullantispywarescanner.com/promo/download/trial/InstallAVg_880899.exe
hxxp://heur.net63.net
hxxp://hothotvideo.com/install.php?uid=9c0baa17cab48c54e8a6d01b47ff1fb7
hxxp://likrion.ho.ua
hxxp://loyaltube.com/tube/?id=140
hxxp://mtwproductions.com.au/gate/
hxxp://porno-tube-x.com/l/berror/id/3913960/
hxxp://rusrm.com/z/cfg.bin
hxxp://streamingtubes2009.com/xplaymovie.php?id=40016
hxxp://viagra-generic-cialis-daily.com
hxxp://video-go.net/go/go.php?sid=1
hxxp://www.globalvisionobdr.com/gate/
hxxp://www.karinya.net.au
hxxp://xbalamquetulum.com

[sparsha]

Rogue related

Code: [Select]


http://checkclick-site.info/install.php
http://checkclick-download.info/en/PE/install.exe

http://virusdoctor-pro.com/downloads/?uid=7&l=69
http://pay-virusdoctor.com/lo/5/index.php?

Virusmelt.com
Virusmeltpro.com
http://payvirusmelt.com/lo/5/index.php?

http://updvms.net/update.exe
http://updvms.cn/update.exe
http://updvms.net/Rpdm.exe
http://updvms.cn/Rpdm.exe