Malware Domain List

Malware Related => Malicious Domains => Topic started by: rodger on March 18, 2009, 04:54:25 pm

Title: malicious sites
Post by: rodger on March 18, 2009, 04:54:25 pm

  PSW Agent,Online Games Threat files are downloaded by the parent file Downlader agent!!!
 :( :o ::) :D 

Parent file
hxxp://d.opqxn.com:88/gr.exe

Child Files
    * hxxp://www.doopx.com:88/new/new1.exe
    * hxxp://www.doopx.com:88/new/new2.exe
    * hxxp://www.doopx.com:88/new/new3.exe
    * hxxp://www.doopx.com:88/new/new4.exe
    * hxxp://www.doopx.com:88/new/new5.exe
    * hxxp://www.doopx.com:88/new/new6.exe
    * hxxp://www.doopx.com:88/new/new7.exe
    * hxxp://www.doopx.com:88/new/new8.exe
    * hxxp://www.doopx.com:88/new/new9.exe
    * hxxp://www.doopx.com:88/new/new10.exe
    * hxxp://www.doopx.com:88/new/new11.exe
    * hxxp://www.doopx.com:88/new/new12.exe
    * hxxp://www.doopx.com:88/new/new13.exe
    * hxxp://www.doopx.com:88/new/new14.exe
    * hxxp://www.doopx.com:88/new/new15.exe
    * hxxp://www1.doopx.com:88/new/new16.exe
    * hxxp://www1.doopx.com:88/new/new17.exe
    * hxxp://www1.doopx.com:88/new/new18.exe
    * hxxp://www1.doopx.com:88/new/new19.exe
    * hxxp://www1.doopx.com:88/new/new20.exe

Title: Re: malicious sites
Post by: carmen on April 10, 2009, 03:31:43 pm

This is Drive-by-Update my friend :)

http://mipistus.blogspot.com/2009/02/drive-by-update-para-propagacion-de.html

bye