PCSL 可疑恶意网站每日分析 20080916

lanvin

1. zango.com
   
2. http://downloads.zango.com/zangogames/chamber/setupchamber2848.exe
   
3. http://downloads.zango.com/zangogames/dvg/setupdavid2365.exe
   
4. http://downloads.zango.com/zangogames/zangotv/setupzangotv2593.exe
   
5. http://downloads.zango.com/zangogames/library/setuplibrary2797.exe
   
6. http://ftp.surfnet.nl/simtel/win95/secsys/passpectpro32.exe
   
7. 
   
8. 180solutions.com
   
9. http://bis.180solutions.com/downloads/msbb.exe
   
10. 
    
11. 
    
12. hotbar.com
    
13. http://installs.hotbar.com/installs/hotbar/programs/hotbar.exe
    
14. http://www.hbdownloads.com/installs/hotbar/programs/hotbarinst.exe
    
15. http://installs.hotbar.com/installs/hbtools/programs/hbtools.exe
    
16. http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab
    
17. http://installs2.hotbar.com/installs/hotbar/programs/hotbar.exe
    
18. 
    
19. 
    
20. zangocash.com
    
21. http://static.zangocash.com/Setup/53/Zango/Setup.exe
    
22. http://static.zangocash.com/Setup/53/Seekmo/Setup.exe

复制代码

另外给出3个可疑网站地址：

1. gophergas.com
   
2. albinoblacksheep.com
   
3. simtel.net

复制代码

以上信息仅供研究！

qigang

下载地址：

http://downloads.zango.com/zangogames/chamber/setupchamber2848.exe
http://downloads.zango.com/zangogames/dvg/setupdavid2365.exe
http://downloads.zango.com/zangogames/zangotv/setupzangotv2593.exe
http://downloads.zango.com/zangogames/library/setuplibrary2797.exe

qigang

下载地址：

http://installs.hotbar.com/installs/hotbar/programs/hotbar.exe
http://www.hbdownloads.com/installs/hotbar/programs/hotbarinst.exe
http://installs.hotbar.com/installs/hbtools/programs/hbtools.exe
http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab
http://installs2.hotbar.com/installs/hotbar/programs/hotbar.exe

PlayWill

支持一下
这些网站全部加入黑名单

Palkia

金山 -

wangjay1980

剩余一个，结果如下

Hello,

passpectpro32.exe

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Ilya Tolstikhin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.