Author: tetak, Posted: Mon Jun 30, 2008 9:01 pm Post subject: [MIRT#4648] Trojan on wmvmedialease.com AS25525
Malware Alert Full Report: /Trojan_malware4648.html Changed status to confirmed malware.IP Converted: 85.92.138.151
dword = 1432128151
hex1 = 0x555c8a97
hex2 = 0x55.0x5c.0x8a.0x97
oct = 0125.0134.0212.0227
codec.exe at this location is malware known as Trojan:Win32/Vundo.gen!D (Microsoft).View CIDR AS25525 Report: http://www.cidr-report.org/cgi-bin/as-report?as=25525
"25525 | NL | ripencc | 2002-12-23 | REASONNET Reasonnet IP Networks - Autonomous System Number"<br />
Extended information for AS25525:
State/Province:
Country: nl
Responsible Domain: reasonnet.com
Abuse Email: abuse@reasonnet.com
/Trojan_malware4648.html