tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5879
|
Posted: Sat Feb 16, 2008 4:32 am Post subject: [MIRT#8097] Trojan-Downloader on ripple.olvt.com AS25137 |
|
|
Malware Alert Full Report: /Trojan_Downloader_malware8097.html Changed status to confirmed malware.IP Converted: 81.92.216.36
dword = 1365039140
hex1 = 0x515cd824
hex2 = 0x51.0x5c.0xd8.0x24
oct = 0121.0134.0330.044
video.exe at this location is malware known as TrojanDownloader:Win32/Small.gen!Z (Microsoft)View CIDR AS25137 Report: http://www.cidr-report.org/cgi-bin/as-report?as=25137
"25137 | PT | ripencc | 2002-08-02 | NFSI NFSi Telecom, Lda."<br />
Extended information for AS25137:
State/Province:
Country: pt
Responsible Domain: nfsi.pt
Abuse Email: postmaster@nfsi.pt
| Quote: | | http://ripple.olvt.com/video.exe |
|
|