Please!

Not sure if either is still active:

hxxp://75.23.81.52 (Happy All Fool's Day)

hxxp://24.83.136.167 (Surprise! The joke's on you.)

VT results for the 24.83 one (as of Monday evening):
> * name: 80331-S-funny.exe._Uk
> * size: 139777
> * md5.: 390ba965b1e3c0d1db37e6829e2d078b
> * sha1: 2c57d9196960ab6da41852c8a065e1e16ebbf44c
> * peid..: -
>
> [ scan result ]
> AhnLab-V3 2008.4.1.0/20080331 found nothing
> AntiVir 7.6.0.78/20080331 found [TR/Crypt.XPACK.Gen]
> Authentium 4.93.8/20080331 found nothing
> Avast 4.7.1098.0/20080331 found nothing
> AVG 7.5.0.516/20080331 found nothing
> BitDefender 7.2/20080331 found [Trojan.Crypt.AP]
> CAT-QuickHeal 9.50/20080331 found [(Suspicious) - DNAScan]
> ClamAV 0.92.1/20080401 found [Trojan.Crypted-16]
> DrWeb 4.44.0.09170/20080331 found nothing
> eSafe 7.0.15.0/20080331 found [Suspicious File]
> eTrust-Vet 31.3.5660/20080401 found nothing
> Ewido 4.0/20080331 found nothing
> F-Prot 4.4.2.54/20080331 found nothing
> F-Secure 6.70.13260.0/20080331 found nothing
> FileAdvisor 1/20080401 found nothing
> Fortinet 3.14.0.0/20080331 found nothing
> Ikarus T3.1.1.20/20080331 found nothing
> Kaspersky 7.0.0.125/20080401 found nothing
> McAfee 5263/20080331 found nothing
> Microsoft 1.3301/20080401 found nothing
> NOD32v2 2988/20080331 found nothing
> Norman 5.80.02/20080331 found nothing
> Panda 9.0.0.4/20080331 found nothing
> Prevx1 V2/20080401 found nothing
> Rising 20.38.01.00/20080331 found nothing
> Sophos 4.28.0/20080331 found [Troj/Dorf-BA]
> Sunbelt 3.0.978.0/20080318 found nothing
> Symantec 10/20080401 found nothing
> TheHacker 6.2.92.259/20080330 found nothing
> VBA32 3.12.6.3/20080325 found nothing
> VirusBuster 4.3.26:9/20080331 found nothing
> Webwasher-Gateway 6.6.2/20080401 found [Trojan.Crypt.XPACK.Gen]
>

From: "Duh_OZ" <(E-Mail Removed)>

| Please!
|
| Not sure if either is still active:
|
| hxxp://75.23.81.52 (Happy All Fool's Day)
|
| hxxp://24.83.136.167 (Surprise! The joke's on you.)
|

Storm Worm running rampant.

I have see almost a dozen other addresses.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp