B.I.S.S. Forums > 68.180.151.74

B.I.S.S. Forums > Malware Research Forum > Malware IP Research Section

Retired

Nov 29 2008, 06:20 PM

Host: win-spyware.com
IP: 68.180.151.74
http://www.robtex.com/ip/68.180.151.74.html
http://www.robtex.com/dns/www.win-spyware.com.html

CODE

http://www.win-spyware.com/AntivirusXP_0126_MN3BM.exe

And this one has a lot of Wachovia bank sites that don't look legit:
http://www.robtex.com/ip/68.180.151.16.html

Kimberly

Nov 29 2008, 07:13 PM

Thanks Retired.

Yahoo has been notified, there's prolly more of them because Mike Burgess did send me a couple per mail too earlier today. He has blogged about those sites a while back here if you're interested.

I'll check that bank stuff a bit later on.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.