More problems for United Information, aka classmates.com
Kimberley has all the information - she has found some malicious advertisements hosted by United Information that have been around for a very long time:
Cite:
http://www.bluetack.co.uk/forums/index.php?s=bd3898f29d64c0cfe467d034f2cd6129&showtopic=18064&st=0&p=86509&#entry86509
The creatives:
nztv.prod.untd.com/RealMedia/ads/Creatives/ISP/MWS_Getfreecar_LBLINT_2_8671/gfc_728x90.swf
and
nztv.prod.untd.com/RealMedia/ads/Creatives/ISP/MWS_GetFreeCar_LBLINT_6_8671/getfreecar728x90_REVISED_07052006.swf
are different in format to those I wrote about yesterday.
The SWFs are protected (although that is easy enough to remove), they are encrypted, and they do not seem to contain a link an to iexplorer-security.org URL. In addition, the campaign URL is an older style:
GET /stats.php?campaign=unlu3001&u=1163187596333
There is a lot more to be gleaned from this incident, but that will have to wait until I have more time in a few hours.