http://{blocked}way.com/oofa/x p.exe

 Analysis by: Sylvia Lascano

 URL BLOCKING DATE/TIME: 13 Nov 2010 10:07:00 AM GMT-8
 RATING: HIGH
 DOMAIN: ripway.com
 CATEGORY: Disease Vector
 DESCRIPTION: JS_SHELLCOD.SMGU accesses this URL to download TSPY_ARDAMAX.HR.

Related Malware