SHARE
TWEET

#MalwareMustDie! libworker.so malware library infected sites

MalwareMustDie May 9th, 2014 1,204 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. #MalwareMustDie libworker.so malware library infection sites
  2.  
  3. // infected URL which are having installer scripts of libworker.so
  4. // some are cleaned up, please bear with 404.
  5. // updated: bahemoth@unixfreaxjp ~]$ date
  6. Fri May  9 21:17:08 JST 2014
  7. // Please check your territorial sites or server for the cleaning purpose.
  8.  
  9. // installer scripts URL of libworker.so
  10.  
  11. h00p://cloodtelecom.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
  12. h00p://gatezonetransport.ae/wp-content/themes/winter/stylegreen.php
  13. h00p://nematex.com/images/stylegreen.php
  14. h00p://9esferas.com/wp-content/themes/twentyten/stylegreen.php
  15. h00p://mayadagi.com/modules/mod_araticlhess/mod_araticlhess.php
  16. h00p://demircilergrup.com/modules/mod_araticlhess/mod_araticlhess.php
  17. h00p://ckmahsap.com/modules/mod_araticlhess/mod_araticlhess.php
  18. h00p://securustelecom.com/modules/mod_araticlhess/mod_araticlhess.php
  19. h00p://blog.kouzelnepradlo.cz/wp-content/uploads/stylegreen.php
  20. h00p://bahcesaray.biz/modules/mod_araticlhess/mod_araticlhess.php
  21. h00p://ubed-doctor.com/modules/mod_araticlhess/mod_araticlhess.php
  22. h00p://shopgirlgifts.com/modules/mod_araticlhess/mod_araticlhess.php
  23. h00p://kalabhavanbahrain.com/images/stylegreen.php
  24. h00p://indocareercoach.com/modules/mod_araticlhess/mod_araticlhess.php
  25. h00p://criacaodesitesportoalegre.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
  26. h00p://ciceronrealestate.com/modules/mod_araticlhess/mod_araticlhess.php
  27. h00p://gamlaborasare.se/images/stylegreen.php
  28. h00p://dietzelindo.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
  29. h00p://georgescott.se/images/stylegreen.php
  30. h00p://english-forall.com/modules/mod_araticlhess/mod_araticlhess.php
  31. h00p://ioacquistonline.altervista.org/blog/wp-content/themes/arras/stylegreen.php
  32. h00p://megaparkfelicilandia.cl/wp-content/themes/parallelus-salutation/stylegreen.php
  33. h00p://andijamarodulung.com/modules/mod_araticlhess/mod_araticlhess.php
  34. h00p://phanbondinhvu.com/images/stylegreen.php
  35. h00p://concentradosdelcentro.com/wp-content/themes/TheCorporation/stylegreen.php
  36. h00p://tecrubelerim.net/wp-content/themes/AskIt/stylegreen.php
  37. h00p://amigosporunsueno.com/modules/mod_araticlhess/mod_araticlhess.php
  38. h00p://cloodtelecom.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
  39. h00p://gatezonetransport.ae/wp-content/themes/winter/stylegreen.php
  40. h00p://nematex.com/images/stylegreen.php
  41. h00p://9esferas.com/wp-content/themes/twentyten/stylegreen.php
  42. h00p://mayadagi.com/modules/mod_araticlhess/mod_araticlhess.php
  43. h00p://demircilergrup.com/modules/mod_araticlhess/mod_araticlhess.php
  44. h00p://ckmahsap.com/modules/mod_araticlhess/mod_araticlhess.php
  45. h00p://securustelecom.com/modules/mod_araticlhess/mod_araticlhess.php
  46. h00p://blog.kouzelnepradlo.cz/wp-content/uploads/stylegreen.php
  47. h00p://bahcesaray.biz/modules/mod_araticlhess/mod_araticlhess.php
  48. h00p://ubed-doctor.com/modules/mod_araticlhess/mod_araticlhess.php
  49. h00p://shopgirlgifts.com/modules/mod_araticlhess/mod_araticlhess.php
  50. h00p://kalabhavanbahrain.com/images/stylegreen.php
  51. h00p://indocareercoach.com/modules/mod_araticlhess/mod_araticlhess.php
  52. h00p://criacaodesitesportoalegre.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
  53. h00p://ciceronrealestate.com/modules/mod_araticlhess/mod_araticlhess.php
  54. h00p://gamlaborasare.se/images/stylegreen.php
  55. h00p://dietzelindo.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
  56. h00p://georgescott.se/images/stylegreen.php
  57. h00p://english-forall.com/modules/mod_araticlhess/mod_araticlhess.php
  58. h00p://ioacquistonline.altervista.org/blog/wp-content/themes/arras/stylegreen.php
  59. h00p://megaparkfelicilandia.cl/wp-content/themes/parallelus-salutation/stylegreen.php
  60. h00p://andijamarodulung.com/modules/mod_araticlhess/mod_araticlhess.php
  61. h00p://phanbondinhvu.com/images/stylegreen.php
  62. h00p://concentradosdelcentro.com/wp-content/themes/TheCorporation/stylegreen.php
  63. h00p://tecrubelerim.net/wp-content/themes/AskIt/stylegreen.php
  64. h00p://amigosporunsueno.com/modules/mod_araticlhess/mod_araticlhess.php
  65. h00p://www.oxygenhairdesign.com/wp-content/themes/OxygenHair/stylegreen.php
  66. h00p://paproch.com.pl/wp-content/themes/spacesphere/stylegreen.php
  67. h00p://www.parota.mx/wp-content/themes/adapt/stylegreen.php
  68. h00p://parsajirak.com/fa/modules/mod_araticlhess/mod_araticlhess.php
  69. h00p://payamobadel.com/modules/mod_araticlhess/mod_araticlhess.php
  70. h00p://paskola-beuzstato.com/wp-content/uploads/stylegreen.php
  71. h00p://pharma-sol.com/wp-content/themes/Nimble/stylegreen.php
  72. h00p://petrospecbrasil.com/wp-content/uploads/stylegreen.php
  73. h00p://phuongnamland.com/modules/mod_araticlhess/mod_araticlhess.php
  74. h00p://phutungmayxuc.com/en/modules/mod_araticlhess/mod_araticlhess.php
  75. h00p://pianovietthanh.vn/wp-content/themes/noteworthy/stylegreen.php
  76. h00p://piedrasdelfaro.com/esp/wp-content/themes/kallyas/stylegreen.php
  77. h00p://pinkstar.ir/wp-content/themes/Avenue/stylegreen.php
  78. h00p://phuketsoftware.net/wp-content/uploads/stylegreen.php
  79. h00p://pixalsystems.com/clients/nosotrasfl.com/wp-content/themes/theme1264/stylegreen.php
  80. h00p://planwithcalacademy.org/eventssite/wp-content/themes/CAS/stylegreen.php
  81. h00p://pokertexaspoker.com/wp-content/themes/corbiz/stylegreen.php
  82. h00p://polatasansor.com/wp-content/themes/welcome_inn/stylegreen.php
  83. h00p://policlinicavalbom.com/modules/mod_araticlhess/mod_araticlhess.php
  84. h00p://polinamineva.com/wp-content/themes/Bold/stylegreen.php
  85. h00p://www.polarisatiefilter.com/wp-content/uploads/stylegreen.php
  86. h00p://ponpesbaitussaadah.com/wp-content/themes/OurBiz/stylegreen.php
  87. h00p://pomegranate-midwives.com/wp-content/themes/twentyten/stylegreen.php
  88. h00p://portalempleado.cione.es/wp-login.php?redirect_to=%2F%3Fcheck%3D1
  89. h00p://portalempleado.cione.es/wp-content/themes/parallelus-salutation/stylegreen.php
  90. h00p://pravda-casino.com/wp-content/themes/imbalance/stylegreen.php
  91. h00p://praxis-v-grossmann.de/wp-content/themes/FlexxSensation/stylegreen.php
  92. h00p://praktijkspiegelkracht.nl/wp-content/themes/spiegelkracht/stylegreen.php
  93. h00p://prcreate.com/wp-content/themes/yin_and_yang/stylegreen.php
  94. h00p://prodesigntr.com/modules/mod_araticlhess/mod_araticlhess.php
  95. h00p://promobilya.com/wp-content/themes/FreshAndClean/stylegreen.php
  96. h00p://www.psamour.com/wp-content/themes/sweetdate-child/stylegreen.php
  97. h00p://project.senselink.net/mcbc/wp-content/uploads/stylegreen.php
  98. h00p://www.psgdecor.com/modules/mod_araticlhess/mod_araticlhess.php
  99. h00p://przeprowadzki-sprzatanie.pl/wp-content/uploads/stylegreen.php#
  100. h00p://psychicstudiolasvegas.com/wp-content/themes/psychic-studio/stylegreen.php
  101. h00p://ptt-air.com/modules/mod_araticlhess/mod_araticlhess.php
  102. h00p://psytel.eu/daph-diff/wp-content/uploads/stylegreen.php
  103. h00p://quantanigeria.com/wp-content/themes/rhea/stylegreen.php
  104. h00p://pymesocial.com/wp-content/uploads/stylegreen.php
  105. h00p://ioacquistonline.altervista.org/blog/wp-content/themes/arras/stylegreen.php
  106. h00p://miniradiosolutions.com/wp-content/uploads/stylegreen.php
  107.  
  108. // below are the sites which are having open directory view and got hacked by  
  109. // libworker.so infection:
  110.  
  111. h00p://oaosu.ru/includes/
  112. h00p://www.risehitus.ee/wp-includes/
  113. h00p://redcliffesoftball.com.au/wp-includes/js/tinymce/plugins/wpfullscreen/
  114. h00p://miniradiosolutions.com/wp-content/uploads/
  115. h00p://www.etikmedikal.com/images/
  116. h00p://countrycosmic.co.za/
  117. h00p://www.amazonasvive.com/
  118. h00p://visualgmt.com/
  119. h00p://comousarelinternet.com/minegociointernet.com/
  120. h00p://vmacq.com/
  121. h00p://www.minegociointernet.com/
  122. h00p://www.djvsolutions.com/
  123. h00p://giritontro.com/_vti_bin/
  124. h00p://tagstrategies.com/
  125. h00p://www.igehirdetesek.hu/
  126. h00p://kpskw.org.pl/
  127.  
  128.  
  129. ---
  130. #MalwareMstDie!
RAW Paste Data
Top