B.I.S.S. Forums > 66.235.126.51, 63.218.71.107, 199.243.163.120, 64.34.165.110

Help - Search - Members - Calendar

Full Version: 66.235.126.51, 63.218.71.107, 199.243.163.120, 64.34.165.110

B.I.S.S. Forums > Malware Research Forum > Malware IP Research Section

Retired

Jan 5 2009, 04:38 AM

malware:
Host: myfuncards.smileycentral.com
IP: 66.235.126.51
http://www.robtex.com/ip/66.235.126.51.html
http://robtex.com/dns/www.myfuncards.smileycentral.com.html

CODE

http://myfuncards.smileycentral.com/download/firefox_install.jhtml

Host: ak.exe.imgfarm.com
IP: 63.218.71.107
http://www.robtex.com/ip/63.218.71.107.html
http://www.robtex.com/dns/ak.exe.imgfarm.com.html

CODE

http://ak.exe.imgfarm.com/images/nocache/funwebproducts/2.3.50.22/MyFunCardsSetup2.3.50.22.ZUfox000.exe

Host: download.webhancer.com
IP: 199.243.163.120
http://www.robtex.com/ip/199.243.163.120.html
http://www.robtex.com/dns/download.webhancer.com.html

CODE

http://download.webhancer.com/files/whCC-webhancer.exe

fake app:
Host: contentcleaner.com
IP: 64.34.165.110
http://www.robtex.com/ip/64.34.165.110.html
http://www.robtex.com/dns/www.contentcleaner.com.html

CODE

http://www.contentcleaner.com/cpa/?a=CD420

Kimberly

Jan 5 2009, 11:57 AM

Added thx.

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.

Invision Power Board © 2001-2012 Invision Power Services, Inc.