Help - Search - Members - Calendar
Full Version: MusicFeet Hijacks
B.I.S.S. Forums > Malware Research Forum > Malware IP Research Section
Moore
MUSICFEET INSTALLS

DONT VISIT THE SITES IN THIS THREAD WITHOUT APPROPRIATE PROTECTION

I started here - www.musicfeet.com - 64.202.163.10 - clicked the pages for a few hours and heres what I got ... lots of logged IPs and small adware bundle installation..

An install from media access [ which installed 180search assistant , internet optimizer , crazywinnings , shopathomeselect and some other random named files , my lucky day ]

you will need to log in to see the pics , otherwise they all show as links for guests instead .



Im pretty sure I said wtf is that installing lol when I saw it , I just hope its good whatever it is.. biggrin.gif and a bunch of popups in the background , just what I wanted.



Oh look here's a popup for something



So I guess I have to click yes to this thing ^ before I can use the site.. ??

Says press yes to access this website , ok so I will .. I really want to see those song codes and all the other good stuff..



Windupdates ??

Looks like its time for my windows updates ?? already ?

[b]Uh-oh guess what happens next ?
vampire.gif Lucky for me I have System Safety Monitor to protect me .. superman2.gif




I must say the installation was very smooth indeed , no reboot or anything .. . smile.gif





Hmm this zango installer wants out ...





look out here comes another install ..





It wants out too , hmm whats the deal .. assassin.gif





hello , we've only just begun ...







something tells me I shouldnt have pressed that yes button , but it's too late now ... skull.gif





Hi there , welcome to my pc , feel free to do whatever you want , I probably wont mind .. not that I can do anything about it now.. cross my fingers and hope for the best.









I realise I could probably use some help with my searching , Google seems to be getting harder and harder to use every day..





well it doesnt sound too bad.. I guess. unsure.gif whats a few ads in return for a whole bunch of free programs to have running on my computer.







Hello whats this , nice name , sounds really friendly ..NOT !! ... ph34r.gif




oh joy , so now they are going to optimize my internet .. for free even , these guys are great. biggrin.gif





I love how you can surf the net and get all kinds of stuff for free , even when you're not looking for it.. blink.gif saves lots o time ya know..





Sounds cool ... I probably need my internet optimized come to think of it..





Well that wasnt so bad , very quick and painless.. I wonder what else I'm going to get for free.





C'mon hurry up and give me more random named files.. !! tongue.gif It's like a lucky dip , you never know whats inside .





And we all know random named spyware files are the koolest of them all .. rolleyes.gif





Now I wonder what this will do ?





I've never won anything before.. I'm feeling lucky today though ..





Maybe it wont be so bad after all ..





Looking good so far !! Gimme more.. laugh.gif





Ok so whats next ..





I am a WINNER woohoo ! Look I won something crazy for once.




Maybe I should press no this time ?? .. help.gif but it's got a crl ma , surely its ok..

crl.comodoca.com 195.92.253.137

This thing on the other hand sounds really cool.. they must know I have a thing for random named files..





Hmm when will it end...


At least they didnt try and give me one of these nasty trojans , I guess thats something..



ALL spyware files were harmed in the making of this documentary..

Now to clean all this garbage off my poor computer !!!

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

:: Logged connections ::

Holy batman .. thats a lot of paypopups and casalemedia garbage and all kinds of things I think deserves to be blocked ....


popunder.paypopup.com - 66.98.208.60
www1.paypopup.com - 216.40.224.220
www2.paypopup.com - 207.44.156.26
www3.paypopup.com - 64.246.11.23
www4.paypopup.com - 216.40.250.58
www5.paypopup.com - 216.12.219.48
www6.paypopup.com - 66.98.218.80
www7.paypopup.com 207.44.160.36
www8.paypopup.com - 64.246.15.27
www10.paypopup.com - 216.40.247.45
www20.paypopup.com - 69.90.216.210
www21.paypopup.com - 69.90.216.219


tv.180solutions.com 64.94.137.65
installs.180solutions.com 216.74.27.26
config.180solutions.com 64.94.137.66
bis.180solutions.com 64.94.137.51
cts.180solutions.com 64.94.137.69
static.callinghome.biz 64.124.153.154
static.flingstone.com 216.95.228.40
public.windupdates.com 216.95.228.11
static.windupdates.com 216.95.228.40
ad.yieldmanager.com 209.10.215.36
static.topconverting.com 193.138.228.17
frame.crazywinnings.com 193.138.228.18
www.internet-optimizer.com 65.39.191.5, 65.39.191.6
cdn.climaxbucks.com 204.176.88.2, 208.184.139.84
www.shopathomeselect.com 199.221.131.110
downloads.shopathomeselect.com 205.240.15.19


www.popuptraffic.com 66.70.21.80
www.budsinc.com 64.62.232.4
budsinc.com 64.62.232.4
show.budsinc.com 64.62.232.9
adtrac.com 216.180.243.154
adtrak.net 65.17.198.120

dist.belnk.com 64.152.73.241
dist.belnk.com 64.157.165.145
webpdp.gator.com 64.157.165.145
www.clicksor.com 208.37.24.10

as.casalemedia.com 216.220.63.244, 67.15.58.51, 69.93.202.164
lb01.casalemedia.com - 216.220.63.244
isg01.casalemedia.com - 66.98.248.22, 67.19.89.20, 67.19.138.244
isg02.casalemedia.com 66.98.248.23, 67.19.89.36, 67.19.145.116
isg03.casalemedia.com 67.19.89.52, 67.19.145.132, 66.98.248.24
isg04.casalemedia.com - 67.19.89.68, 67.19.145.148, 66.98.248.25
isg05.casalemedia.com 67.19.145.84, 66.98.248.26, 67.19.89.84
isg06.casalemedia.com 66.98.248.27, 66.98.248.32, 67.19.145.68
isg07.casalemedia.com 66.98.248.28, 66.98.248.33, 67.19.145.52
isg08.casalemedia.com 67.19.145.36, 207.44.160.22, 66.98.248.29
isg09.casalemedia.com 207.44.160.17, 66.98.248.30, 67.19.145.20
isg10.casalemedia.com 66.98.248.31, 67.19.145.4, 207.44.196.113
asg53.casalemedia.com - 67.19.234.84, 64.246.56.45
asg55.casalemedia.com - 67.19.234.116, 64.246.58.98
asg57.casalemedia.com 64.246.62.83, 67.19.234.148
asg58.casalemedia.com - 64.246.62.84, 67.19.234.164
asg59.casalemedia.com - 64.246.62.92, 67.19.234.180
asg60.casalemedia.com 67.19.234.196, 66.98.132.8
asg61.casalemedia.com 67.19.234.212, 66.98.134.85
asg62.casalemedia.com - 66.98.208.41, 67.19.234.228
asg63.casalemedia.com 66.98.208.61, 67.19.234.244
asg64.casalemedia.com - 66.98.218.31, 67.19.235.4
asg65.casalemedia.com - 66.98.218.48, 67.19.235.20
asg66.casalemedia.com- 207.44.242.8, 67.19.235.36
asg67.casalemedia.com - 67.19.235.52, 207.44.242.14
asg68.casalemedia.com 67.15.82.25, 207.44.246.64
asg69.casalemedia.com - 67.15.56.39, 67.15.82.26
asg70.casalemedia.com 67.15.82.27, 67.15.56.80
asg71.casalemedia.com 67.15.82.28, 67.15.56.81
asg72.casalemedia.com - 67.15.82.29, 67.15.62.68
asg73.casalemedia.com 67.15.82.30, 67.15.82.81
asg75.casalemedia.com 67.15.94.69, 66.98.130.81
asg76.casalemedia.com 67.15.104.70, 66.98.130.87
asg77.casalemedia.com 66.98.162.60, 67.15.104.76
asg78.casalemedia.com 67.15.58.40, 66.98.176.36
asg79.casalemedia.com 66.98.178.5, 67.15.80.22
asg80.casalemedia.com 66.98.224.65, 67.15.80.60
asg82.casalemedia.com 67.15.113.16, 67.15.112.30

media-b.vpptechnologies.com 63.150.141.6
media-5.vpptechnologies.com 63.150.141.6
media-6.vpptechnologies.com 63.150.141.18
media-1.vpptechnologies.com 209.133.111.197
media-4.vpptechnologies.com 63.150.141.6
media-c.vpptechnologies.com 63.150.141.6
media-f.vpptechnologies.com 63.215.86.199
media-0.vpptechnologies.com 209.133.111.197
media-e.vpptechnologies.com 63.150.141.6
media-a.vpptechnologies.com 208.254.18.136
agentq.vpptechnologies.com 12.129.176.254
static.vpptechnologies.com 208.185.219.163, 209.133.111.9

jcontent.bns1.net 64.124.186.68, 64.124.186.67
jbns2.cydoor.com 63.123.77.196, 63.123.77.195
jmamma.cjt1.net 209.11.67.27
jmbi52.cjt1.net 38.117.175.27

focusin.ads.targetnet.com
66.201.203.130, 66.201.203.136, 66.201.203.141, 66.201.203.145, 63.236.25.102, 63.236.25.103, 63.236.25.104, 63.236.25.106, 63.236.25.107, 63.236.25.110, 63.236.25.111, 63.236.25.112, 63.236.25.113, 63.236.25.121, 63.236.25.122, 63.236.25.123, 63.236.25.125, 66.77.183.182, 66.77.183.183, 66.77.183.184, 66.77.183.185, 66.77.183.186

secure-nz.imrworldwide.com 203.21.27.6, 203.21.27.8, 203.21.27.9
www.ansearch.com.au 65.98.57.186
www.searcheurope.com 69.28.204.17
php.searcheurope.com 69.28.204.16
www.navisearch.net - 69.20.69.171
search.mapocity.com 66.70.119.231
crl.comodoca.com 195.92.253.137
gr1.cc 199.221.131.138
ads.x10.com 63.211.210.20
affiliates.x10.com 63.211.210.20
www.yceml.net 65.216.116.114
www.awltovhc.com 216.34.209.13, 63.215.202.74
www.tqlkg.com 216.34.209.13, 63.215.202.74
www.lduhtrp.net 63.215.202.74, 216.34.209.13
www.afcyhf.com 216.34.209.13, 63.215.202.74
ads.realtechnetwork.net - 64.237.98.125

servedby.advertising.com
209.225.0.6, 209.225.0.25, 209.225.0.32, 209.225.0.34, 209.225.0.36

www.qksz.net:216.34.209.13-216.34.209.13
www.qksz.net:63.215.202.74-63.215.202.74

myaffiliateads.com 209.172.33.111
adserver.itsfogo.com 193.203.227.129
search.domainsponsor.com 64.235.246.141
web4.realtracker.com 212.72.51.163
track.domainsponsor.com 64.235.246.158
layout1.realtracker.com 212.72.51.178
landing.domainsponsor.com 64.235.246.142
www.pelpunt.nl 83.172.129.220
www.search-more-of-the-web.info 217.160.252.46
nht-2.extreme-dm.com 213.244.183.216
customersupportnetwork.com 64.41.74.25
www.search-more-of-the-web.net 217.160.252.46
www.internationalwig.com 146.82.66.175
www.bmbstudio.com 209.157.71.50
www.smotw.info 66.196.41.55
www.borsaplus.it 62.149.130.125
www.mytemplatestorage.com 209.249.220.5
www.shoppersgonewild.com 140.99.105.64
www.tendenzamercati.net 62.149.140.20
t1.extreme-dm.com 213.244.183.204, 213.244.183.210
counter.fateback.com - 66.40.66.17
int.sitestat.com - 212.72.38.147
www.skyscraperads.co.uk - 65.201.111.110
www.fast2net.co.uk - 65.201.111.110
oas-central.realmedia.com - 64.58.80.21
www.go2jackpots.co.uk - 65.201.111.110
www.buycheapadvertising.com - 206.251.184.30
www.tmstrategies.net 62.149.140.23
www.bestoffreebie.com 66.225.254.134
www.ugotgames.net 65.98.70.18
www.homestead.com 209.157.71.50
www.deathspeaks.com 209.157.71.50
www.ezinfocenter.com 207.218.129.42
www.outrageousmovies.com 207.36.253.164
www.addfreegames.com 64.202.163.154
ansrchau.112.2o7.net 216.52.17.116
www.dirone.com 209.120.238.93
www.allcoolmusic.com 209.172.33.111
www.templatehelp.com 209.249.220.5
offerweb.com 64.94.55.50
www.888.com 213.219.54.201
images.888.com - 213.52.227.50
int.sitestat.com 212.72.38.147
boingboing.net 204.11.50.136
www.boingboing.net 204.11.50.136
www.accoona.com 65.17.251.200
e0.extreme-dm.com 213.244.183.217, 213.244.183.203
nickvia.112.2o7.net 216.52.17.216, 216.52.17.226, 216.52.17.236
fastwebcounter.com 64.255.14.166
fastonlineusers.com 66.37.10.4
www.free-webspace.biz 80.190.243.137
www.lighthouse1.net 66.235.211.104
www.dead-eye.net 209.142.3.150
nms04.wbb4u.de 213.203.193.144
www.free2code.net 67.15.10.83
www.click2web.com 72.29.65.187
media.ign.com 216.35.123.81
www.studiomc.co.yu 217.26.64.182
portos.fremad.ru 195.242.9.13
www3.enigmasoftware.com 205.177.66.50
www.enigmasoftware.com 205.177.66.89


See you next time , same bat time , same bat channel ..
doggfather
And the oscar for best Spyware Documentary goes to..............Moore!

Excellent job Moore smile.gif
r00ted
wow. I loved it all the way through wink.gif

Get anymore free gifts lately? wink.gif
Ripper24
Amazing and excellent work Moore, smile.gif
well done and remember

DO NOT VISIT THE SITES MENTION ABOVE !!!!

Ripper24
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.