Saturday, February 02, 2008

Return of Innocent Searches

Hi folks,

I keep getting requests offline for more innocent searches, so here are some from the last couple of days. Enjoy...

coal furnace with gas insert - fake codec
road trip - neosploit
pearl shop - neosploit
high capacity battery pack - fake codec/ rootkit
eyelashes + adhesive - fake codec
camping turon gate - fake codec
greenville gremlins - fake codec
blueberry jam - mpack/ icepack
school closings in illinois parents - search engine hijack
las vegas wedding photographers - mdac
carolina theater - mpack/ icepack

Stay safe folks,




At 7:44 AM, Anonymous Rich said...

Here another:

bt-100 uk ringtone (8th hit)

At 7:47 AM, Anonymous Anonymous said...

How do you come up with these searches? Is the process just an automated mishmashing of terms or something else?

At 5:33 AM, Blogger Roger Thompson said...

anonymous asked how we came up with the searches. We don't ... our users do. Most of our users report automatically when they find something. We don't know who _they_ are, but we know where the Bad Thing is. It's really very interesting stuff, and very important in understanding what the Bad Guys are up to.

At 5:37 AM, Blogger Roger Thompson said...

rich said "Here's another". It seems to be clean now. At least for me. That sort of shows how transient these things can be. Sometimes they're cleaned, sometimes they only shoot stuff at certain times or to certain countries. They do this to make it hard for the guys relying on central databases. Real-time scanning, like what we do, is really the best way.

At 2:24 PM, Anonymous Rich said...

Yes, it seems the link I found has disappeared from the Google cache, though the original page is still there - hxxp://


Post a Comment

<< Home