See here: htxp://ldmdownload.com/redir.php?o=XviD&aff=746
virus: unknown_html_RFI_shell probably a hacking kit like Ascrimez Kit. (RFI means remote file inclusion, a deceiving technique using a txt file)…a read up on this technique can be found here:
http://maldesign.netau.net/2009/07/11/remote-exploitation-remote-file-inclusions-rfis/
link source Malware Brainstorm
and here: http://web17.webbpro.de/index.php?page=ascrimez-kit
(link source: Ascrimex Kt description by Peter Kleissner)
More general information “on classifying RFI malware” found here:
http://osdir.com/ml/security.botnet.general/2008-09/msg00010.html
source: Gadi Evron, Beyond Security, Israel, link: http://tinyurl.com/6kol8f (PDF)
For the the Dutch remote exploit site,
look here: htxp://jsunpack.jeek.org/dec/go?report=2f2a4aed09d0f5be955f9f8ed23d3947b07bace6
see: http://wepawet.iseclab.org/view.php?hash=8110e9758b91e7858a89b06a1fda1240&t=1299358492&type=js
nothing found here:
and also checked for additional malware there: hxtp://www.downloaddirect.com/sites/default/files/smiley_pointing.swf
nothing found here: http://www.virustotal.com/file-scan/report.html?id=8f8f7e8fa5be776ccde2f74629ee23900b3f1fedf2828c3c74ffeeccfb8e830f-1299358716
this flagged as a malicious site: http://www.urlvoid.com/scan/downloaddirect.com
see recent: http://support.clean-mx.de/clean-mx/viruses.php?domain=ldmtracking.com&sort=first%20desc
polonus