daily something......

[boston]

xttp://managergsgv.jelev.eu//images/e86419800283e5c558192f7b7e38d87e.jar
xttp://managergsgv.jelev.eu/server_privileges.php?b6d9038d2e242bed8428dfa01d66024e=3

[boston]

xttp://hourznqpd.jesais.fr//images/5991c78e5611b59e268bc836c1439b6c.jar
xttp://hourznqpd.jesais.fr/server_privileges.php?03262e97cf0a45cb083839f695fc6ab2=3
https://www.virustotal.com/file/fb115a4d718f408808d61a82c7ba5697f23ceeca10f03a173d863fe587b9f640/analysis/1328000379/

[boston]

xttp://subimageus.aelita.fr//images/r/4c435e4ffa5b6fc942cfe4bdbb7fdf19.jar
xttp://subimageus.aelita.fr/server_privileges.php?2386a9de2c909820f90a160d20b08d6c=3
https://www.virustotal.com/file/fb115a4d718f408808d61a82c7ba5697f23ceeca10f03a173d863fe587b9f640/analysis/1328040482/

[boston]

fake av:
xttp://watchitnegu7.tk/pcscan10/?www=390 leads to xttp://watchitnegu7.tk/ldpatch/ldpatch.php?afid=390
http://urlquery.net/report.php?id=19278
http://wepawet.cs.ucsb.edu/view.php?hash=8bb332a93875a13f25fc2f5e364db3cb&t=1328473317&type=js
https://www.virustotal.com/file/52d47df7d5f1b097cff223cc2ba72bab5f8f4f6c85aeaf3f4f92a8e6d26cb154/analysis/1328474672/

[Xylitol]

FakeAV Download (directly from the affiliate)

Code: [Select]

http://star-stat.com/download/?aff=441&saff=00

[Xylitol]

Cycbot download (directly from the affiliate)

Code: [Select]

http://gigabid.org/promo.php?ukey=289dff07669d7a23de0ef88d2f7129e7&log=Gigapool

[Xylitol]

FakeAV Download (directly from the affiliate)

Code: [Select]

http://89.149.223.107/187.exe&key=1db658ed
http://89.149.223.107/139.exe&key=a4664df4

[boston]

xttp://faithful.racingexecutive.com/main.php?page=37d7611a122ec22a -> xttp://faithful.racingexecutive.com/content/jav.jar
http://wepawet.cs.ucsb.edu/view.php?hash=012b363ce875911e9e66f85f8c05b652&t=1329861036&type=js
https://www.virustotal.com/file/c5e72243db3ac25e850dc035a367d34e652215805ec2287b5ff7863bdc5196c5/analysis/1329861092/

[mercutio]

xttp://faithful.racingexecutive.com/main.php?page=37d7611a122ec22a -> xttp://faithful.racingexecutive.com/content/jav.jar
http://wepawet.cs.ucsb.edu/view.php?hash=012b363ce875911e9e66f85f8c05b652&t=1329861036&type=js
https://www.virustotal.com/file/c5e72243db3ac25e850dc035a367d34e652215805ec2287b5ff7863bdc5196c5/analysis/1329861092/

Looks like blackhole - better analysis report:
http://wepawet.cs.ucsb.edu/view.php?hash=012b363ce875911e9e66f85f8c05b652&t=1330045376&type=js

[sursmurf]

Fake-AV

Code: [Select]

hXXp://security-scanner-2012-fwedsd.info/dc6f39a32d1dced9/4/setup.exe
VT 2/43
https://www.virustotal.com/file/7ee35eda951ef8121b64dd896a35a655be304920baa7bcd0beb1076dbe30aa92/analysis/1330345276/

[GaryDee]

Code: [Select]

pedamotor.kz/
pedamotor.kz/design/gallery/jquery_002.js
pedamotor.kz/design/gallery/custom.js
pedamotor.kz/design/gallery/flowplayer-3.js
pedamotor.kz/design/gallery/jquery1.js
pedamotor.kz/design/gallery/l10n.js
pedamotor.kz/design/gallery/quicksand.js
pedamotor.kz/design/js/jquery.js
pedamotor.kz/design/js/textshadow.js
HEUR:Trojan.Script.Generic

[GaryDee]

Code: [Select]

http://zapuskator.org/4game_zapuskatr_S0P5113173Z.zip
Hoax.Win32.ArchSMS.mhcz
Program:Win32/Pameseg.BU

[GaryDee]

Code: [Select]

http://verdex.info/media/system/js/mootools-more.js
http://verdex.info/media/system/js/core.js
HEUR:Trojan.Script.Generic

[GaryDee]

Code: [Select]

http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/desigdrobot.themepack&nid=1131
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/tropical-fish.themepack&nid=1129
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/sunsets-windows-7-themescom.themepack&nid=1127
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/winter.themepack&nid=1128
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/islands.themepack&nid=1121
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/window-7-christmas.themepack&nid=1119
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/angry-birds-wwwwindows7themeofthedaycom.themepack&nid=1118
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/starwars.themepack&nid=1116
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/stargatesg1.themepack&nid=1120
http://www.windows-7-themes.com/sites/all/modules/pubdlcnt/pubdlcnt.php?file=http://www.windows-7-themes.com/sites/default/files/glassed.themepack&nid=1112

Artemis!AAF1CE1A4C71
Win32/Adware.RK.AF
Trojan.Win32.Generic!BT

http://128.111.48.236/domain.php?hash=79368bc54b7d657b5eb537c98c7441f5&type=js

[GaryDee]

Code: [Select]

http://tw-ru.org/2010/05/
http://tw-ru.org/2010/06/
http://tw-ru.org/2010/07/
http://tw-ru.org/2010/07/11/
http://tw-ru.org/2010/07/15/
http://tw-ru.org/2010/07/18/
http://tw-ru.org/2010/07/19/
http://tw-ru.org/2012/03/
http://tw-ru.org/foto/
http://tw-ru.org/goroda/
http://tw-ru.org/novosti/
http://tw-ru.org/oteli/
http://tw-ru.org/page/10/
http://tw-ru.org/page/11/
http://tw-ru.org/page/12/
http://tw-ru.org/page/13/
http://tw-ru.org/page/14/
http://tw-ru.org/page/15/
http://tw-ru.org/page/16/
http://tw-ru.org/page/2/
http://tw-ru.org/page/3/
http://tw-ru.org/page/4/
http://tw-ru.org/page/5/
http://tw-ru.org/page/6/
http://tw-ru.org/page/7/
http://tw-ru.org/page/8/
http://tw-ru.org/page/9/
http://tw-ru.org/rules.html
http://tw-ru.org/stati/
http://tw-ru.org/stati/150-velikoe-kulturnoe-nasledie.html
http://tw-ru.org/stati/150-velikoe-kulturnoe-nasledie.html#comment
http://tw-ru.org/stati/151-korolevstvo-kxmerov.html
http://tw-ru.org/stati/151-korolevstvo-kxmerov.html#comment
http://tw-ru.org/stati/152-nacionalnye-prazdniki-tailanda.html
http://tw-ru.org/stati/152-nacionalnye-prazdniki-tailanda.html#comment
http://tw-ru.org/stati/153-tajskaya-muzyka.html
http://tw-ru.org/stati/153-tajskaya-muzyka.html#comment
http://tw-ru.org/stati/154-upakovka-i-pogruzka-v-tajlande.html
http://tw-ru.org/stati/154-upakovka-i-pogruzka-v-tajlande.html#comment
http://tw-ru.org/stati/155-vozvrat-nds-v-tajlande.html
http://tw-ru.org/stati/155-vozvrat-nds-v-tajlande.html#comment
http://tw-ru.org/stati/156-rybalka-v-tailande.html
http://tw-ru.org/stati/156-rybalka-v-tailande.html#comment
http://tw-ru.org/stati/157-skalolazanie-v-tajlande.html
http://tw-ru.org/stati/157-skalolazanie-v-tajlande.html#comment
http://tw-ru.org/stati/158-dostoprimechatelnosti-severnogo-tailanda.html
http://tw-ru.org/stati/158-dostoprimechatelnosti-severnogo-tailanda.html#comment
http://tw-ru.org/stati/159-dostoprimechatelnosti-severo-vostoka-tailanda.html
http://tw-ru.org/stati/159-dostoprimechatelnosti-severo-vostoka-tailanda.html#comment
http://tw-ru.org/tags/
http://tw-ru.org/tags/%C1%E0%ED%E3%EA%EE%EA%E5/
http://tw-ru.org/tags/%C1%E0%ED%E3%EA%EE%EA/
http://tw-ru.org/tags/%C1%F3%E4%E4%E8%E7%EC/
http://tw-ru.org/tags/%CA%E0%EA/
http://tw-ru.org/tags/%CE%F2%E4%FB%F5/
http://tw-ru.org/tags/%CE%F2%E5%EB%FC/
http://tw-ru.org/tags/%CF%E0%F2%F2%E0%E9%FF/
http://tw-ru.org/tags/%CF%EB%FF%E6%E8/
http://tw-ru.org/tags/%CF%F5%F3%EA%E5%F2/
http://tw-ru.org/tags/%D1%E0%EC%F3%E8/
http://tw-ru.org/tags/%D1%EF%EE%F0%F2/
http://tw-ru.org/tags/%D2%E0%E8%EB%E0%ED%E4%E0/
http://tw-ru.org/tags/%D2%E0%E8%EB%E0%ED%E4%E5/
http://tw-ru.org/tags/%D2%E0%E8%EB%E0%ED%E4/
http://tw-ru.org/tags/%D2%E0%E9%EB%E0%ED%E4/
http://tw-ru.org/tags/%D2%E0%E9%F1%EA%E0%FF/
http://tw-ru.org/tags/%D2%E0%E9%F1%EA%E8%E9/
http://tw-ru.org/tags/%E2%E8%E4/
http://tw-ru.org/tags/%E2/
http://tw-ru.org/tags/%E4%EE%F1%F2%EE%EF%F0%E8%EC%E5%F7%E0%F2%E5%EB%FC%ED%EE%F1%F2%E8/
http://tw-ru.org/tags/%E8/
http://tw-ru.org/tags/%EC%F3%E7%FB%EA%E0/
http://tw-ru.org/tags/%ED%E0/
http://tw-ru.org/tags/%ED%E5/
http://tw-ru.org/tags/%EE%EF%EF%EE%E7%E8%F6%E8%EE%ED%E5%F0%EE%E2/
http://tw-ru.org/tags/%EE%F2/
http://tw-ru.org/tags/%F1%E5%E2%E5%F0%ED%EE%E3%EE/
http://tw-ru.org/tags/%F1%F2%EE%EB%EA%ED%EE%E2%E5%ED%E8%FF%F5/
http://tw-ru.org/tags/%F1/
http://tw-ru.org/tags/%F2%E0%E9%F1%EA%E8%E5/
http://tw-ru.org/tags/%F4%EE%F2%EE/
http://tw-ru.org/tags/Amari/
http://tw-ru.org/tags/Ambassador/
http://tw-ru.org/tags/Baan/
http://tw-ru.org/tags/Baiyoke/
http://tw-ru.org/tags/Beach/
http://tw-ru.org/tags/City/
http://tw-ru.org/tags/Hotel/
http://tw-ru.org/tags/Resort/
http://tw-ru.org/tags/Samui/
tw-ru.org/#dialog
tw-ru.org/&quot
tw-ru.org/?do=lostpassword
tw-ru.org/?do=register
tw-ru.org/index.php
tw-ru.org/index.php?do=feedback
tw-ru.org/index.php?do=stats
tw-ru.org/templates/colormeleon/css/jMenu.js
tw-ru.org/templates/colormeleon/css/jquery-1.2.1.min.js
tw-ru.org/templates/colormeleon/css/popup.js
tw-ru.org/templates/colormeleon/js/effects.core.js
tw-ru.org/templates/colormeleon/js/jquery.js

HEUR:Trojan.Script.Generic