Malware related links - 13 April

Layer 1 - http://993iie.cn/s33d301/s01.htm
Layer 2 - http://993iie.cn/s33d301/new.html
Layer 2 - http://993iie.cn/a.js
Layer 3 - http://993iie.cn/s33d301/fx.htm
Layer 4 - http://993iie.cn/s33d301/mlink.html
Layer 3 - http://993iie.cn/14.htm
Layer 4 - http://993iie.cn/14.js
Layer 5 - http://lujiji.com/ms.css
Layer 3 - http://993iie.cn/as.htm
Layer 4 - http://lujiji.com/as.css
Layer 3 - http://993iie.cn/Bfyy.htm
Layer 4 - http://993iie.cn/bff.js
Layer 4 - http://993iie.cn/bf.js
Layer 3 - http://993iie.cn/lzz.htm
Layer 4 - http://993iie.cn/lzz.js
Layer 3 - http://993iie.cn/real10.htm
Layer 3 - http://993iie.cn/real11.htm
Layer 3 - http://993iie.cn/cx.htm
Layer 4 - http://993iie.cn/xmybrx.js
Layer 4 - http://993iie.cn/s1
Layer 3 - http://993iie.cn/wewew.js

Others domain that share same IP address with 993iie.cn
->heromu.cn
->qj3344.cn
->www1.1144mu.cn