tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5879
|
Posted: Mon Nov 12, 2007 1:52 am Post subject: [MIRT#755] Trojan on 89.200.136.92 AS24931 |
|
|
Malware Alert Full Report: /Trojan_malware755.html IP Converted: 89.200.136.92
dword = 1506314332
hex1 = 0x59c8885c
hex2 = 0x59.0xc8.0x88.0x5c
oct = 0131.0310.0210.0134
Changed status to confirmed malware. View CIDR AS24931 Report: http://www.cidr-report.org/cgi-bin/as-report?as=24931
"24931 | GB | ripencc | 2002-05-28 | DEDIPOWER DediPower Managed Hosting Limited"<br />
Extended information for AS24931:
State/Province:
Country:
Responsible Domain: asuk.com
Abuse Email: abuse@asuk.com
setup1_10045.exe at this location is malware known as Trojan.Win32.Agent.crh (Kaspersky)
| Quote: | | http://www.membersmatter.net/1004/setup1_10045.exe |
|
|