tetak
MIRT Team Lead Premium Member
 Joined: Jan 19, 2007 Posts: 5869
|
Posted: Sun Apr 06, 2008 1:38 pm Post subject: [MIRT#9609] Backdoor on 202.72.194.21 AS18153 |
|
|
Malware Alert Full Report: /Backdoor_malware9609.html Changed status to confirmed malware.IP Converted: 202.72.194.21
dword = 3393765909
hex1 = 0xca48c215
hex2 = 0xca.0x48.0xc2.0x15
oct = 0312.0110.0302.025
card.exe at this location is malware known as Backdoor.IRC.Zapchast.g (Kaspersky).View CIDR AS18153 Report: http://www.cidr-report.org/cgi-bin/as-report?as=18153
"18153 | ID | apnic | 2002-03-25 | MULTIDATA-ID-AP PT Multidata Rancana Prima"<br />
Extended information for AS18153:
State/Province:
Country: id
Responsible Domain: multidata.net.id
Abuse Email: mauritz@multidata.net.id
| Quote: | | http://202.72.194.21/card.exe |
|
|