[MIRT#11243] Trojan on onlinevideosoftex.com AS29131

CastleCops -> MIRT Reports

Author: tetak PostPosted: Thu May 15, 2008 1:02 am    Post subject: [MIRT#11243] Trojan on onlinevideosoftex.com AS29131

Malware Alert
 
 Full Report: CastleCops Link/Trojan_malware11243.html
 
 Consumed following related reports:

[10728] http://onlinevideosoftex.com/exe2/install_player_3913170.exe
[10733] http://onlinevideosoftex.com/exe2/install_player_3913122.exe
[11240] http://onlinevideosoftex.com/exe2/9999999.exe
[11241] http://onlinevideosoftex.com/exe2/3.exe
[11242] http://onlinevideosoftex.com/exe2/2.exe
Changed status to confirmed malware.IP Converted: 78.129.158.225

dword = 1317117665
hex1 = 0x4e819ee1
hex2 = 0x4e.0x81.0x9e.0xe1
oct = 0116.0201.0236.0341
c-setup.exe at this location is malware known as Trojan:Win32/Delflob.I (Microsoft).View CIDR AS29131 Report: http://www.cidr-report.org/cgi-bin/as-report?as=29131

"29131 | GB | ripencc | 2003-06-11 | RAPIDSWITCH-AS RapidSwitch Ltd"<br />
Extended information for AS29131:
State/Province:
Country:
Responsible Domain: 49services.com
Abuse Email: postmaster@49services.com
Quote:
http://onlinevideosoftex.com/exe2/1.exe



CastleCops -> MIRT Reports

All times are GMT

Page 1 of 1


Powered by phpBB © 2001 phpBB Group