Malware Alert
 
 Full Report: /Trojan_Downloader_malware1135.html
 
 Consumed following related reports:

[1951] http://85.114.140.107/~grander/dl.exe
[4057] http://85.114.140.107/~grander/RBvBm1066.exe
Changed status to confirmed malware.IP Converted: 85.114.140.107

dword = 1433570411
hex1 = 0x55728c6b
hex2 = 0x55.0x72.0x8c.0x6b
oct = 0125.0162.0214.0153
dl.exe at this location is malware known as Worm.Win32.Mefir.r (Kaspersky).RBvBm1066.exe at this location is malware known as Trojan-Downloader.Win32.VB.bkw (Kaspersky).wr-1-21.exe at this location is malware known as TrojanDownloader:Win32/Small (Kaspersky).View CIDR AS24961 Report: http://www.cidr-report.org/cgi-bin/as-report?as=24961

"24961 | DE | ripencc | 2002-06-10 | FIBREONE-AS fibre one networks GmbH, Duesseldorf"<br />
Extended information for AS24961:
State/Province:
Country:
Responsible Domain: fastit.net
Abuse Email: abuse@fastit.net