Feed

Conficker, Waledac, Fake Security Domains to Block

Posted on January 22nd, 2009 in asprox,New Domains,rogue antivirus,sql injection by dglosser

Lots of domains associated with Conficker, Waledac,  and fake antivirus removal sites.  A few domains associated with sql injection.  Neuter them all.  Thanks to     www.scanw.com/blog, ddanchev.blogspot.com, www.shadowserver.org, and others for providing this information:

3bomb .com 365zhaosheng .com
51much .com antispyknight .biz
706sese .cn antivirus-scan-your-pc .com
allspaces .com bestantivirusdefence .com
bc-s350 .cn best-antivirus-defense .com
bengchitt .cn bestantivirusfastscan .com
bestbarack .com bestantivirusfastscanner .com
daoye .nm .cn bestantivirusproscan .com
dbrgf .ru bestantivirusproscanner .com
dicgdsp .org best-antivirus-pro-scanner .com
dzxecapiw .info best-antivirus-protection .com
epwqbyya .com best-antivirus-scanner .com
expowale .com bestbaracksite .com
fogzchqe .org bestobamadirect .com
gkenjj .biz best-scanner-pc .net
goeasybill .com cbchyttgqay .biz
gogo2me .net damnedspyware .com
gpt0 .ru fastantispywarescan .com
id-rt02 .cz frankiezfunz .com
iwtrubh .biz gameproadvance .com
ji88 .com goldensurvey .com
jobarack .com goodnewsdigital .com
jvikldgo .net goodnewsreview .com
kcgxgnny .net google-analytics .pbtgr .ru
keke03 .cn googlenations .cn
lijg .ru googl-status .com
lyhivgkd .org googol-analisys .com
mefenydz .com greatbarackguide .com
mfqal .net greatobamaguide .com
nprzq .biz greatobamaonline .com
ojzarbw .net hiromatokoko .biz
pbtgr .ru internet-antispyware-scan .com
ppkok .cn internetexamine .com
ppsuite .com internetprotectedpayments .com
qiweroqw .com linkworldnews .com
qqqqkkkss .cn liveantispywarescan .com
rheni .org live-antispyware-scan .com
rrrrpppkk .cn live-antiviruspc-scan .com
skyhu .com nohtingherez .cn
smakata .com pharmacy-earth .com
syqxvsid .com premium-advanced-scanner .com
teirkmm .net proantiviruscomputerscan .com
tejary .net proantivirusprotection .com
thecountx .net professional-virus-scan .com
topwale .com rapidantiviruspcscan .com
ttfabb .com rapidspywarescanner .com
ukdikl .org reportradio .com
uzapl .com securedonlinewebspace .com
vvk5 .cn securedserverdownload .com
vvk7 .cn securedupdateupdatesoftware .com
vyuiwltf .com secure-plus-payments .com
waledirekt .com softwaresecuredbilling .com
waleonline .com spacemynews .com
wew2223 .cn superobamadirect .com
winzxm .com superobamaonline .com
xskeqrcl .net thebaracksite .com
xxhdy .net tyoxnaqjrlu .org
xxztb .org uqruninkqca .net
yeofa .org waleprojekt .com
yeynxe .net wapcitynews .com
yjodeikka .org worldnewsdot .com
yprpg .biz worldnewseye .com
ytcqft .com worldtracknews .com
zzzz6655 .cn  

Contact us if you want to help us keep the Malware Domain Blacklist current.
Read this page if you want to report a false positive.
Domains.txt file is the complete list along with original reference.
Updates are located at http://www.malwaredomains.com/updates.
The full files are located at: http://www.malwaredomains.com/files
BOOT file is in MS DNS format.
spywaredomains.zones file is in BIND format.
Also Available in AdBlock, ISA, and MaraDNS formats.
Now a trusted source on the WOT-the Web of Trust!
Used by SURBL, MOREnet, and others…

Comments are closed.