link to persistent activeX pop-up / malware
CastleCops
-> Web Malware Links
Author: logicman_alf, Location: UK
Posted: Mon Jun 30, 2008 2:50 am Post subject: link to persistent activeX pop-up / malware
Spam-posted on website:
hxxp://www.dogpile.com/clickserver/_iceUrlFlag=1?rawURL=hxxp://corib91.it/video1.exe&0=&1=0&4=135.750.733.216&5=301.357.507.332&9=1630135750733&1
Just going to corib91 dot com is sufficient to trigger a redirection and attack.
Author: tetak,
Posted: Tue Jul 01, 2008 10:23 pm Post subject:
The malware file appears to have been removed from the website.
Author: bobby_, Location: Austria
Posted: Thu Jul 03, 2008 4:04 pm Post subject:
If you see this kind of malware again, there are always two EXE files in the same folder, one with name video.exe, other with the name video1.exe
I follow this infection for some time now.
The EXE files are mostly identified as Trojan.Win32.Exchanger.(version), but sometimes also as various Trojan.Win32.Agent.(version).
The first part of the link is a legit site used as a redirector (Google, doubleclick.net etc.)
Second part of the link is the hacked site.
CastleCops
-> Web Malware Links
All times are GMT
Page 1 of 1
Powered by phpBB © 2001 phpBB Group