DangerSite.ChatMessenger

[SYP Battlecommander]

Welcome!

 

I'm the webmaster of http://www.saveyourpc.de.tl . I am collecting some dangerous Websites and have collected some sites, which were send out in Windows Live Messenger and other chat messengers in my database website (click here). I'd like to present them you for adding them to your program! For any questions you can contact me, I proudly like to help you improving your great software.

 

 

Moreover I also want to tell you that most users who are infected with this IM.Worm has the following malicious entries in their system:

C:/WINDOWS/system32/advhost.exe
C:/WINDOWS/system32/adlaunch32.dll
HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Windows/AppInit_DLLs

 

ATTENTION: PLEASE DO NOT VISIT THESE SITES, I RECOMMEND YOU TO BLOCK THEM ONLY:

 

www.SuperBlockierWorld.info
www.alex.mittendrein.Da-Real-Deal.info
www.Da-Real-Deal.info
www.pirschi1990.imagerosetti.info
www.the-coolest-stuff.info
www.imagerosetti.info
www.imagrshak.info
www.coooool.info
www.pirschi1990.imagrshak.info
www.DirektBonusBargGains.info
www.ErstesBonusBargAmbar.info
www.maxreal.sn4psh0ts.com
www.sn4psh0ts.com
www.whats-up-today.com
www.cpashield.com
www.TeenyWelt.info
www.whoisblocked.info
www.collihafeneger.invite.piczzx.com
www.bauersbaptist.invite.amazingthingss.com
www.bonusmelodysite.info
www.theblockieronline.info
www.video.obxhost.net
www.phil.preiner.yourfavtones.com
www.picsforparty.info
www.j_soliman.picsforparty.info
www.imagesupload.biz
www.mesx.net
www.DirektBarg.info
www.sweet-girl.info
www.naiti-paru.ru
www.hey.checkthizz.com/?mau.sal.1993
www.dutychip.com
www.img1241.imageshakkz.com/?alex.mittendrein
www.img1241.imageshakkz.com
www.moy-boy.ru
www.img3523.meetyourims.com/?david_groessinger
www.img3523.meetyourims.com
www.twoy-test.info
www.img5926.meetyourims.com/?christoph9876
www.podruzka.co.cc
www.megapicss.com/?user=mau.sal.1993&pic=DSC01425.JPG
www.megapicss.com
www.CoolestOfferz.com 
www.img78912.PhotoBukkets.com/?user=im-metalhead&pic=DSC00425.JPG
www.img78912.PhotoBukkets.com/?user=im-metalhead&pic=DSC00845.JPG
www.img78912.PhotoBukkets.com/?user=im-metalhead&pic=DSC01345.JPG
www.img78912.PhotoBukkets.com/?user=im-metalhead&pic=DSC01425.JPG
www.img78912.PhotoBukkets.com
www.google-moneyblog.com
www.img39526.ImageLoaderz.com/?user=mau.sal.1993&pic=DSC00425.JPG
www.img39526.ImageLoaderz.com/?user=mau.sal.1993&pic=DSC00845.JPG
www.img39526.ImageLoaderz.com/?user=mau.sal.1993&pic=DSC01345.JPG
www.img39526.ImageLoaderz.com/?user=mau.sal.1993&pic=DSC01425.JPG
www.img39526.ImageLoaderz.com
www.meetyourims.com
www.WowThatsCoool.com
www.PicBuckets.com/?user=im-metalhead&pic=DSC00425.JPG
www.PicBuckets.com/?user=im-metalhead&pic=DSC00845.JPG
www.PicBuckets.com/?user=im-metalhead&pic=DSC01345.JPG
www.PicBuckets.com/?user=im-metalhead&pic=DSC01425.JPG
www.PicBuckets.com
www.LikeThatStuff.com
www.SuperCoolz.com
www.j_soliman.MyHomePicz.com/?image=DSC00245.JPG 
www.MyHomePicz.com
www.my-google-money.com
www.ilovethiz.com
www.melodisea.info
www.pictureshotz.com/?user=j_soliman&image=DSC00245.JPG
www.pictureshotz.com
www.StayFriendsForever.com/?invite=alex.mittendrein@gmx.at
www.StayFriendsForever.com
www.SweeetOfferz.com 
www.SweetStufff.com
www.ImageTalez.com/?user=j_soliman&image=DSC00245.JPG 
www.ImageTalez.com
www.HotPiczz.com/?user=j_soliman&image=DSC00245.JPG 
www.HotPiczz.com
www.PictureFreakz.com/?user=j_soliman&image=DSC00567.JPG
www.PictureFreakz.com
www.my-secret-gallery-download.com/pic_gallery.html
www.my-secret-gallery-download.com
www.my-secret-gallery-download.com/pic_gallery.php
www.the-piccy-ticky.com/?user=alex.mittendrein
www.the-piccy-ticky.com
www.bullsea.com
www.Snaps-Gallery.com
www.mimarsinanegitim.com
www.knol.mei
www.bujor.org

[333halfevil]

May I ask you to zip the malicious file and send them to VirusTotal, then post back here? :smile:

[SYP Battlecommander]

I'm very sorry, but I don't have the malicious file ... I will look if I can find it by a new victim, if somebody contacts me and upload it then ...

 

MFG

[333halfevil]

Battlecommander;17482']I'm very sorry, but I don't have the malicious file ... I will look if I can find it by a new victim, if somebody contacts me and upload it then ...

 

MFG

 

Ok thank you :smile:

[SYP Battlecommander]

May I ask you to zip the malicious file and send them to VirusTotal, then post back here?

 

No one has now the files, but I could find them in Virustotal by using Google.

 

VirusTotal:

advhost.exe (click here)

adlaunch32.dll (click here)

[333halfevil]

Battlecommander;17486']No one has now the files, but I could find them in Virustotal by using Google.

 

VirusTotal:

advhost.exe (click here)

adlaunch32.dll (click here)

 

I'll track them down don't worry :-P

[Polse300]

Cool you have made a program that automaticly blocks the sites!

 

i was about to manually edit the host file :-)

[SYP Battlecommander]

/# Update (new malicious sites):

 

ATTENTION: PLEASE DO NOT VISIT THESE SITES, I RECOMMEND YOU TO BLOCK THEM ONLY:

 

127.0.0.1	www.hugedr.com
127.0.0.1	hugedr.com
[b]127.0.0.1	www.url9.org/video45902
127.0.0.1	url9.org/video45902
127.0.0.1	62.212.74.194/vid9911/video6284.php
127.0.0.1	www.aqc.com/video6115
127.0.0.1	aqc.com/video6115[/b]
127.0.0.1	www.screwnice.com
127.0.0.1	screwnice.com

 

Attention: Please also look this - "62.212.74.194/vid9911" contains some viruses!

 

MFG

John

[evilfantasy]

You should get rid of the popups on your site...