MIRT Team Lead Premium Member Joined: Jan 19, 2007 Posts: 5773
Posted: Sun Jun 29, 2008 1:35 am Post subject: [MIRT#2312] Trojan-Spy on oya.ru AS30943
Malware Alert Full Report: /Trojan_Spy_malware2312.html Changed status to confirmed malware.IP Converted: 217.112.42.39
dword = 3648006695
hex1 = 0xd9702a27
hex2 = 0xd9.0x70.0x2a.0x27
oct = 0331.0160.052.047
update.exe at this location is malware known as TrojanSpy:Win32/Goldun (Microsoft).View CIDR AS30943 Report: http://www.cidr-report.org/cgi-bin/as-report?as=30943
"30943 | GB | ripencc | 2004-01-23 | UTRANSIT-AS Utransit International Carrier Limited"<br />
Extended information for AS30943:
State/Province:
Country:
Responsible Domain: utransit.net
Abuse Email: abuse@utransit.net
Generated and sent email malware alert to respective parties.
You cannot post new topics in this forum You can reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum