[MIRT#11299] Trojan on web52.bwx2.de AS24900

CastleCops -> MIRT Reports

Author: tetak PostPosted: Tue May 13, 2008 12:24 am    Post subject: [MIRT#11299] Trojan on web52.bwx2.de AS24900

Malware Alert
 
 Full Report: CastleCops Link/Trojan_malware11299.html
 
 Consumed following related reports:

[11477] http://web52.bwx2.de/arch.exe
Changed status to confirmed malware.IP Converted: 80.190.246.202

dword = 1354692298
hex1 = 0x50bef6ca
hex2 = 0x50.0xbe.0xf6.0xca
oct = 0120.0276.0366.0312
arch.exe at this location is malware known as Trojan:Win32/Tibs.gen!G (Microsoft).View CIDR AS24900 Report: http://www.cidr-report.org/cgi-bin/as-report?as=24900

"24900 | DE | ripencc | 2002-05-14 | IPX-SERVER IPX Server GmbH"<br />
Extended information for AS24900:
State/Province:
Country: de
Responsible Domain: ip-exchange.de
Abuse Email: postmaster@ip-exchange.de
Quote:
http://web52.bwx2.de/index3.php



CastleCops -> MIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group