Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #MalwareMustDie libworker.so malware library infection sites
- // infected URL which are having installer scripts of libworker.so
- // some are cleaned up, please bear with 404.
- // updated: bahemoth@unixfreaxjp ~]$ date
- Fri May 9 21:17:08 JST 2014
- // Please check your territorial sites or server for the cleaning purpose.
- // installer scripts URL of libworker.so
- h00p://cloodtelecom.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
- h00p://gatezonetransport.ae/wp-content/themes/winter/stylegreen.php
- h00p://nematex.com/images/stylegreen.php
- h00p://9esferas.com/wp-content/themes/twentyten/stylegreen.php
- h00p://mayadagi.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://demircilergrup.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://ckmahsap.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://securustelecom.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://blog.kouzelnepradlo.cz/wp-content/uploads/stylegreen.php
- h00p://bahcesaray.biz/modules/mod_araticlhess/mod_araticlhess.php
- h00p://ubed-doctor.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://shopgirlgifts.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://kalabhavanbahrain.com/images/stylegreen.php
- h00p://indocareercoach.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://criacaodesitesportoalegre.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
- h00p://ciceronrealestate.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://gamlaborasare.se/images/stylegreen.php
- h00p://dietzelindo.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
- h00p://georgescott.se/images/stylegreen.php
- h00p://english-forall.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://ioacquistonline.altervista.org/blog/wp-content/themes/arras/stylegreen.php
- h00p://megaparkfelicilandia.cl/wp-content/themes/parallelus-salutation/stylegreen.php
- h00p://andijamarodulung.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://phanbondinhvu.com/images/stylegreen.php
- h00p://concentradosdelcentro.com/wp-content/themes/TheCorporation/stylegreen.php
- h00p://tecrubelerim.net/wp-content/themes/AskIt/stylegreen.php
- h00p://amigosporunsueno.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://cloodtelecom.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
- h00p://gatezonetransport.ae/wp-content/themes/winter/stylegreen.php
- h00p://nematex.com/images/stylegreen.php
- h00p://9esferas.com/wp-content/themes/twentyten/stylegreen.php
- h00p://mayadagi.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://demircilergrup.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://ckmahsap.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://securustelecom.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://blog.kouzelnepradlo.cz/wp-content/uploads/stylegreen.php
- h00p://bahcesaray.biz/modules/mod_araticlhess/mod_araticlhess.php
- h00p://ubed-doctor.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://shopgirlgifts.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://kalabhavanbahrain.com/images/stylegreen.php
- h00p://indocareercoach.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://criacaodesitesportoalegre.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
- h00p://ciceronrealestate.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://gamlaborasare.se/images/stylegreen.php
- h00p://dietzelindo.com/modules/mod_ariimageslidersa/mod_ariimageslidersa.php
- h00p://georgescott.se/images/stylegreen.php
- h00p://english-forall.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://ioacquistonline.altervista.org/blog/wp-content/themes/arras/stylegreen.php
- h00p://megaparkfelicilandia.cl/wp-content/themes/parallelus-salutation/stylegreen.php
- h00p://andijamarodulung.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://phanbondinhvu.com/images/stylegreen.php
- h00p://concentradosdelcentro.com/wp-content/themes/TheCorporation/stylegreen.php
- h00p://tecrubelerim.net/wp-content/themes/AskIt/stylegreen.php
- h00p://amigosporunsueno.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://www.oxygenhairdesign.com/wp-content/themes/OxygenHair/stylegreen.php
- h00p://paproch.com.pl/wp-content/themes/spacesphere/stylegreen.php
- h00p://www.parota.mx/wp-content/themes/adapt/stylegreen.php
- h00p://parsajirak.com/fa/modules/mod_araticlhess/mod_araticlhess.php
- h00p://payamobadel.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://paskola-beuzstato.com/wp-content/uploads/stylegreen.php
- h00p://pharma-sol.com/wp-content/themes/Nimble/stylegreen.php
- h00p://petrospecbrasil.com/wp-content/uploads/stylegreen.php
- h00p://phuongnamland.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://phutungmayxuc.com/en/modules/mod_araticlhess/mod_araticlhess.php
- h00p://pianovietthanh.vn/wp-content/themes/noteworthy/stylegreen.php
- h00p://piedrasdelfaro.com/esp/wp-content/themes/kallyas/stylegreen.php
- h00p://pinkstar.ir/wp-content/themes/Avenue/stylegreen.php
- h00p://phuketsoftware.net/wp-content/uploads/stylegreen.php
- h00p://pixalsystems.com/clients/nosotrasfl.com/wp-content/themes/theme1264/stylegreen.php
- h00p://planwithcalacademy.org/eventssite/wp-content/themes/CAS/stylegreen.php
- h00p://pokertexaspoker.com/wp-content/themes/corbiz/stylegreen.php
- h00p://polatasansor.com/wp-content/themes/welcome_inn/stylegreen.php
- h00p://policlinicavalbom.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://polinamineva.com/wp-content/themes/Bold/stylegreen.php
- h00p://www.polarisatiefilter.com/wp-content/uploads/stylegreen.php
- h00p://ponpesbaitussaadah.com/wp-content/themes/OurBiz/stylegreen.php
- h00p://pomegranate-midwives.com/wp-content/themes/twentyten/stylegreen.php
- h00p://portalempleado.cione.es/wp-login.php?redirect_to=%2F%3Fcheck%3D1
- h00p://portalempleado.cione.es/wp-content/themes/parallelus-salutation/stylegreen.php
- h00p://pravda-casino.com/wp-content/themes/imbalance/stylegreen.php
- h00p://praxis-v-grossmann.de/wp-content/themes/FlexxSensation/stylegreen.php
- h00p://praktijkspiegelkracht.nl/wp-content/themes/spiegelkracht/stylegreen.php
- h00p://prcreate.com/wp-content/themes/yin_and_yang/stylegreen.php
- h00p://prodesigntr.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://promobilya.com/wp-content/themes/FreshAndClean/stylegreen.php
- h00p://www.psamour.com/wp-content/themes/sweetdate-child/stylegreen.php
- h00p://project.senselink.net/mcbc/wp-content/uploads/stylegreen.php
- h00p://www.psgdecor.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://przeprowadzki-sprzatanie.pl/wp-content/uploads/stylegreen.php#
- h00p://psychicstudiolasvegas.com/wp-content/themes/psychic-studio/stylegreen.php
- h00p://ptt-air.com/modules/mod_araticlhess/mod_araticlhess.php
- h00p://psytel.eu/daph-diff/wp-content/uploads/stylegreen.php
- h00p://quantanigeria.com/wp-content/themes/rhea/stylegreen.php
- h00p://pymesocial.com/wp-content/uploads/stylegreen.php
- h00p://ioacquistonline.altervista.org/blog/wp-content/themes/arras/stylegreen.php
- h00p://miniradiosolutions.com/wp-content/uploads/stylegreen.php
- // below are the sites which are having open directory view and got hacked by
- // libworker.so infection:
- h00p://oaosu.ru/includes/
- h00p://www.risehitus.ee/wp-includes/
- h00p://redcliffesoftball.com.au/wp-includes/js/tinymce/plugins/wpfullscreen/
- h00p://miniradiosolutions.com/wp-content/uploads/
- h00p://www.etikmedikal.com/images/
- h00p://countrycosmic.co.za/
- h00p://www.amazonasvive.com/
- h00p://visualgmt.com/
- h00p://comousarelinternet.com/minegociointernet.com/
- h00p://vmacq.com/
- h00p://www.minegociointernet.com/
- h00p://www.djvsolutions.com/
- h00p://giritontro.com/_vti_bin/
- h00p://tagstrategies.com/
- h00p://www.igehirdetesek.hu/
- h00p://kpskw.org.pl/
- ---
- #MalwareMstDie!
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement