Trojan Downloader 3/41 on VT

July 16th, 2009

thetubeamps.com pushes a fake codec:

Other domains on this IP 64.20.38.172:

dipexe.com

exe-direct.com

exe-get.com

exe-online-world.com

exe-paste.com

exe-porto.com

exe-site.com

exefileformat.com

exenetsfiles.com

eyeexe.com

freeexefiles.com

hotexefiles.com

my-exe-load.com

newexefile.com

red-exe.com

robo-exe.com

soft-exe.net

the-exefiles.com

tiaexe.com

VirusTotal detection is poor 3/41

Jerome Segura

Malware ID: a36a4e12a3e3e3a3bf32a52d33a1ccb3.zip