http://{blocked}orntonllp.com/ IEupdater.bin

April 14, 2011

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

 Analysis by: Paul Tiu

---

 URL BLOCKING DATE/TIME: 17 Feb 2011 01:29:00 AM GMT-8

 RATING: HIGH

 DOMAIN: granthorntonllp.com

 CATEGORY: Disease Vector

 DESCRIPTION: TSPY_ZBOT.SMHA accesses this site to download its configuration file.

Related Malware

• TSPY_ZBOT.SMHA