http://ads.{BLOCKED}o.com/cgi-bin/advert/getads?did=43

August 10, 2012

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Paul Jayson Tiu

---

 URL BLOCKING DATE/TIME: 12 Jun 2012 12:10:00 AM GMT-8

 RATING: HIGH

 DOMAIN: ads.eorezo.com/

 CATEGORY: Disease Vector

 DESCRIPTION:

ADW_EOREZO connects to this URL to display ads on the affected system. This malware is one of the "Printer Virus" that prints several lines of characters when executed on infected systems.

Related URLs

• http://storage5.{BLOCKED}c.itmages.ru/i/12/0601/h_1338571059_9957469_b48b167953.jpeg
• http://dles.{BLOCKED}o.com/clib/suf.exe?{random string}
• http://prof.{BLOCKED}o.com/cgi-bin/create_profile.cgi
• http://log.{BLOCKED}o.com/cgi-bin/trace.cgi

Related Malware

• TROJ_AGENT.BCPC
• ADW_EOREZO

Related Web Attack

• Understanding the Printer Virus