tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5764
|
Posted: Fri Feb 15, 2008 4:11 am Post subject: [MIRT#8034] eCard on 69.107.248.92 AS7132 |
|
|
Malware Alert Full Report: /eCard_malware8034.html Changed status to confirmed malware.IP Converted: 69.107.248.92
dword = 1164703836
hex1 = 0x456bf85c
hex2 = 0x45.0x6b.0xf8.0x5c
oct = 0105.0153.0370.0134
valentine.exe at this location is malware known as Email-Worm.Win32.Zhelatin.vi (Kaspersky).View CIDR AS7132 Report: http://www.cidr-report.org/cgi-bin/as-report?as=7132
"7132 | US | arin | 1996-09-13 | SBIS-AS - AT&T Internet Services"<br />
Extended information for AS7132:
State/Province: tx
Country: us
Responsible Domain: swbell.net
Abuse Email: abuse@swbell.net
| Quote: | | http://69.107.248.92/ |
|
|