hs.3-227.zlkon.lv -(94.247.3.227)

[SysAdMini]

Code: [Select]

sim-softportal.com/promo.exe

Code: [Select]

f-bizsoftportal.com/promo.exe

Code: [Select]

mgf-softwares.com/promo.exe

Code: [Select]

freeportalsoftwarenow.com/promo.exe

Code: [Select]

somefilesportalnow.com/promo.exehttp://www.virustotal.com/de/analisis/d13501770d0d275267e13ca8e4336749

[CM_MWR]

O heh...close but no cigar. 

You oughta just pool em all together, I been seeing these for some months now with different variables

hs.2-95.zlkon.lv/40E8001442563833373364346533642D66333835326220666C0000018A6600000000760000005DEB00053042494E52
hs.2-95.zlkon.lv/40E8001442563833373364346533642D66333835326220666C0000018A6600000000760000005DEB000530626B7175
hs.2-95.zlkon.lv/40E8001442563833373364346533642D66333835326220666C0000018A66000000007600000642EB000530D5DDE1E6
hs.2-95.zlkon.lv/40E8001442563833373364346533642D66333835326220666C0000018A66000000017600000642EB0005300912171D

[SysAdMini]

Code: [Select]

somefilesportalnow.com/viewtubesoftware.40019.exe
freeportalsoftwarenow.com/viewtubesoftware.40019.exe
sim-softportal.com/viewtubesoftware.40019.exe
dnk-softwares.com/viewtubesoftware.40019.exe
get-softwares.com/viewtubesoftware.40019.exe
glk-softportal.com/viewtubesoftware.40019.exe
glock-softwares.com/viewtubesoftware.40019.exe
contr-softportal.com/viewtubesoftware.40019.exe
http://www.virustotal.com/de/analisis/3bab70586a563c0e7edf2181504c6e0f
http://www.threatexpert.com/report.aspx?md5=8ab1ad490a65ea907848b8f5b2aa6682