tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5860
|
Posted: Sun Jun 29, 2008 1:35 am Post subject: [MIRT#2312] Trojan-Spy on oya.ru AS30943 |
|
|
Malware Alert Full Report: /Trojan_Spy_malware2312.html Changed status to confirmed malware.IP Converted: 217.112.42.39
dword = 3648006695
hex1 = 0xd9702a27
hex2 = 0xd9.0x70.0x2a.0x27
oct = 0331.0160.052.047
update.exe at this location is malware known as TrojanSpy:Win32/Goldun (Microsoft).View CIDR AS30943 Report: http://www.cidr-report.org/cgi-bin/as-report?as=30943
"30943 | GB | ripencc | 2004-01-23 | UTRANSIT-AS Utransit International Carrier Limited"<br />
Extended information for AS30943:
State/Province:
Country:
Responsible Domain: utransit.net
Abuse Email: abuse@utransit.net
Generated and sent email malware alert to respective parties. | Quote: | | http://oya.ru/vyhod/numizmat/ima/get.php?file=exe |
|
|