CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

MIRT(TM)

Malware Incident Reporting and Termination(TM) Squad

A global malware termination operation launched by CastleCops, the volunteer MIRT Squad is comprised of folks who report malware, investigate malware, and actively work on malware takedown and termination. MIRT is funded by CastleCops. Become a MIRT Squad terminator by reporting malware today!

[ How-To / FAQ ]

MIRT -> Confirmed Malware | Terminated Malware


status: terminated

HTTP Response
14 Oct, 2008
22:59:25
HTTP/1.1 404 Not Found
ID13807 (termination link)
TitleTrojan-Dropper
Entry
MIRT Squad
Reporter
salmon1
Timestamp23 Jun, 2008 @ 18:07:06
Topic ID224299 - Read/respond to MIRT commentary.
Handler Note:
28 Jun, 2008
21:19:54
tetak: Consumed following related reports:

[13849] http://max-graf.com.pl/video1.exe
[13982] http://max-graf.com.pl/r.html
Handler Note:
28 Jun, 2008
21:20:50
tetak: video.exe at this location is malware known as TrojanDropper:Win32/Nuwar.gen!ldt (Microsoft).
Handler Note:
28 Jun, 2008
21:21:22
tetak: View CIDR AS12741 Report: http://www.cidr-report.org/cgi-bin/as-report?as=12741

"12741 | PL | ripencc | 1999-10-21 | INTERNETIA-AS Netia SA"

Handler Note:
28 Jun, 2008
21:21:22
tetak: Extended information for AS12741:
State/Province:
Country: pl
Responsible Domain: inetia.pl
Abuse Email: abuse@inetia.pl
Handler Note:
28 Jun, 2008
21:22:11
tetak: Generated and sent email malware alert to respective parties.
Slaves13849, 13982,

Report for at 23 Jun, 2008 @ 18:07:13


fetched page

at 23 Jun, 2008 @ 18:07:59
MD5 Fingerprint: 0dc24e68874fb6f8dc45fc8845acada0
SHA1 Fingerprint: dab69d42d4abe34a1298c95deda584437b5c26f5
Version 1.0
spacer spacer