tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5878
|
Posted: Tue Jan 22, 2008 2:55 pm Post subject: [MIRT#770] Trojan-Downloader on webcindario.com AS28842 |
|
|
Malware Alert Full Report: /Trojan_Downloader_malware770.html Changed status to confirmed malware.install_maxprotector.cmd at this location is malware known as Trojan-Downloader.Win32.Banload.bpv (Kaspersky)IP Converted: 89.17.220.65
dword = 1494342721
hex1 = 0x5911dc41
hex2 = 0x59.0x11.0xdc.0x41
oct = 0131.021.0334.0101
View CIDR AS28842 Report: http://www.cidr-report.org/cgi-bin/as-report?as=28842
"28842 | ES | ripencc | 2003-03-12 | VELOXIA-AS ====================================="<br />
Extended information for AS28842:
State/Province:
Country:
Responsible Domain: veloxia.com
Abuse Email: abuse@veloxia.com
| Quote: | | http://empresasx.webcindario.com/install_maxprotector.cmd |
|
|