tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5864
|
Posted: Thu Aug 16, 2007 5:03 am Post subject: [MIRT#194] eCard on 24.81.185.30 AS6327 |
|
|
Malware Alert Full Report: /eCard_malware194.html Consumed following related reports:
[195] http://24.81.185.30/?d496d2989907cd64e28c
Changed status to confirmed malware. IP Converted: 24.81.185.30
dword = 408008990
hex1 = 0x1851b91e
hex2 = 0x18.0x51.0xb9.0x1e
oct = 030.0121.0271.036
View CIDR AS6327 Report: http://www.cidr-report.org/cgi-bin/as-report?as=6327
"6327 | CA | arin | 1996-03-08 | SHAW - Shaw Communications Inc."<br />
Extended information for AS6327:
State/Province: ab
Country: ca
Responsible Domain: shaw.ca
Abuse Email: internet.abuse@sjrb.ca
msdataaccess.exe at this location is a W32/Nuwar@MM virus as seen by McAfee
| Quote: | | http://24.81.185.30/?d8a7c0b58e47d14c775ed2175ee0c2a4c1c8 |
|
|