seoisabusiness - 3:12 pm on Jun 16, 2010 (gmt 0)
found a similar but slightly different occurrence of malware request before crawling stopped of one of the domains, instead of /ticker/MBISetup.exe /downloads/Atlantis_Patch.exe was requested.
126.96.36.199 - - [15/Jun/2010:03:11:08 +0200] GET /s/downloads/Atlantis_Patch.exe HTTP/1.1 301 356 ref=- ua=Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
188.8.131.52 - - [15/Jun/2010:03:11:08 +0200] GET /s/downloads/atlantis_patch.exe HTTP/1.1 410 11805 ref=- ua=Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
google requested /s/downloads/Atlantis_Patch.exe, server - trained to lowercase all URLs - returned an HTTP 301 for a lowercase URL, then the HTTP 404 followed. crawling down followed shortly afterwards, either it's related or not, i don't know - but it's very suspicious