A little mix

[JohnC]

download.live-player.com/Live-Player_download.php?file=db Malware calls home
download.live-player.com/Live-Player_download.php?file=skin_dll Malware calls home
download.live-player.com/Live-Player_download.php?file=sqlite_dll Malware calls home
download.live-player.com/Live-Player_download.php?file=liveplayer_exe Malware calls home
download.live-player.com/Live-Player_download.php?file=liveplayer_skin Malware calls home
bl4ckst4r.cn/forum/foxpdf.php Exploits
bl4ckst4r.cn/forum/npdf.php Exploits
pornproductions09.com/scan/?id=260 FraudLoad.ekn / FakeAlert
spywaresystems.info/0/go.php?sid=2 FraudLoad.ekn / FakeAlert
fcbarcelona-alb.com FraudLoad.ekn / FakeAlert
tubeonporn09.net/codec/260.exe FraudLoad.ekn / FakeAlert
videoporntrue.com/scan/ FraudLoad.ekn / FakeAlert
pornotvnetwork.us Koobface
wottrack.com/promo.php?id=1000 DNSChanger
tmarab.com/vb/language/1/videoplayer.php.htm Trojan
videoland.biz Zlob
messengerdemon.free.fr/membres/up/Codec_Windows_Media_Player.exe Backdoor.IRCBot.gmp
ologetcn.zeigtsichimweb.de/amazing-video.html Rogue
tinnily.info/cgi-bin/counter?id=629901&ref= Rogue
warwork.info/cgi-bin/visits?id=591905&k=katie+richie+home+video&ref= Rogue
salehner.ynd.pl/all-the-best-video.htm Rogue
wihull.jclan.pl/dronchiro-1034.html Rogue
tangoing.info/cgi-bin/search?id=593102&k=nude+army+men&ref= Rogue
free-webscaners.net/disk/?code=170 Rogue
trafficshop.biz/ts/in.cgi?157 Rogue
retroxporntube.com  DNSChanger
hqplayer.net/will/373851649/1/player.php?m=bW92NC53bXY=&id=1000 DNSChanger
newhotvid.com DNSChanger
tampsb.info/cj/ Exploits
xdsabc.info/tds/go.php?sid=3 Exploits
new-videos.info Trojan
celebs-home-portal.com/?id=45017 Trojan
celebs-home-portal.com/video.php Trojan
exclusivestarvideo.com/Celebrity_StarVideo/Flash_Video/index.htm FraudLoad.ekn / FakeAlert
pornproductions09.net/codec/344.exe FraudLoad.ekn / FakeAlert
7stepsmedia.net/download/3776694945673d3d03635c6c/play-video.exe Trojan-Dropper.NSIS
tvcodec.net/xvidcodec.php DNSChanger




Modify
zuxmash.info/tsc/in.cgi?2     New IP 78.108.180.233

[JohnC]

afflvwetib.com/progs/royyl/fcppddma.php?adv=adv663 Malware calls home
afflvwetib.com/progs/royyl/lvreefo.php  Worm.Pinit.ds
afflvwetib.com/progs/royyl/ggcqqdde.php Winwebsec / Ertfor
afflvwetib.com/progs/royyl/kqddj.php Virut
afflvwetib.com/progs/royyl/wspcpq.php Virut
afflvwetib.com/progs/royyl/clmvviwj.php Virut
afflvwetib.com/progs/royyl/cyiivvvjjw.php Virut
afflvwetib.com/progs/royyl/yhrrrrsfob Loadadv.ACA
afflvwetib.com/progs/royyl/dranobool.php?adv=adv663&code1=LNLD&code2=3115&id=1824245000&p=1 Malware calls home
afflvwetib.com/uniq.php?id=1824245000&p=1 Malware calls home
ns1.afflvwetib.com NameServer for malware sites
ns2.afflvwetib.com NameServer for malware sites
klikvs.cn/in/load.exe Zbot
klikvs.cn/in/cfg/EXP.exe Zbot
bfcysytdze.net/aasuper0.php Backdoor.Rustock.NFM
bfcysytdze.net/aasuper1.php Virut / Virtob
bfcysytdze.net/aasuper2.php Trojan-Downloader.Small
bfcysytdze.net/aasuper3.php Koobface
ns1.bfcysytdze.net NameServer for malware sites
ns2.bfcysytdze.net NameServer for malware sites
currentlywork.com/site/unipack/index.php Exploits






Remove
individualpeople.biz/go.php?sid=1       Duplicate

[JohnC]

gasex.info/s?search=xxx Results direct to malware
66.36.241.191/__counter/go.php?sid=2&tds-sekey=xxx&tds-id=29533 FakeAlert.BDR / FraudTool / Rogue
66.36.241.191/_getf_/xxx.html?id=29533 FakeAlert.BDR / FraudTool / Rogue
66.36.241.191/_getf_/g.php?q=xxx&id=29533 FakeAlert.BDR / FraudTool / Rogue
tubez-boobez.com/promo1/get.php?aid=1540&vname=xxx FakeAlert.BDR / FraudTool / Rogue
ipl.hk Exploits
google-analistyc.net/in.cgi?5 Exploits
archebald.com/promo/?92905d6ab40d95486148bb091780f99e Exploits
ns2.prospeed.cn NameServer for malware sites
livesexhard.ru/1vid1/index.html Exploits
livecumsex.ru Exploits
ns2.Tanford.cn NameServer for malware sites
ns1.Tanford.cn NameServer for malware sites
porn-blog.biz Rogue
traflab.com/in.cgi?4 Rogue
traflab.com/actual_redirect/sp.php Rogue
nicoleaustinxxxmovies.nakvgyuy.cn FakeAlert.BDR / FraudTool.PrivacyCenter.aj / Rogue
greatds.su/in.cgi?3&seoref=undefined&parameter=$keyword&se=$se&ur=1&HTTP_REFERER=undefined&default_keyword=undefined FakeAlert.BDR / FraudTool.PrivacyCenter.aj / Rogue
callsaua.info/software/ FakeAlert.BDR / FraudTool.PrivacyCenter.aj / Rogue
callsaua.info/software/stat/install.exe FakeAlert.BDR / FraudTool.PrivacyCenter.aj / Rogue
megasearch.coolwebsearch.us/search.php Exploits
i1match361.biz/html/2440/f8ae8aedaf494548b681dedb37dd3d5f/ Exploits
wabfind.in/page/2440/f8ae8aedaf494548b681dedb37dd3d5f/0517172721782737/ Exploits
wabfind.in/file/2440/f8ae8aedaf494548b681dedb37dd3d5f/0517172721782737/0.gif Rootkit.Podnuha.byf / Boaxxe.E
freesexywomanpic.statesaua.info Exploits
bureauofprintingengraving.growauts.info Exploits
shermanwilliamspaints.everyauts.info Exploits


Multiple IPs
antvirushelpv1.com 69.4.230.204 Rogue
antvirushelpv1.com 38.99.170.9 Rogue
antvirushelpv1.com 78.47.91.153 Rogue
antvirushelpv1.com 83.133.115.9 Rogue