tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5878
|
Posted: Tue Jan 22, 2008 2:38 pm Post subject: [MIRT#1951] Worm on 85.114.140.107 AS24961 |
|
|
Malware Alert Full Report: /Worm_malware1951.html Changed status to confirmed malware.dl.exe at this location is malware known as Worm.Win32.Mefir.r (Kaspersky)IP Converted: 85.114.140.107
dword = 1433570411
hex1 = 0x55728c6b
hex2 = 0x55.0x72.0x8c.0x6b
oct = 0125.0162.0214.0153
View CIDR AS24961 Report: http://www.cidr-report.org/cgi-bin/as-report?as=24961
"24961 | DE | ripencc | 2002-06-10 | FIBREONE-AS fibre one networks GmbH, Duesseldorf"<br />
Extended information for AS24961:
State/Province:
Country:
Responsible Domain: fastit.net
Abuse Email: abuse@fastit.net
| Quote: | | http://85.114.140.107/~grander/dl.exe |
|
|