{blocked}dinvest.net/cfg1.bin

 Analysis by: Paul Tiu

 URL BLOCKING DATE/TIME: 07 Oct 2010 09:56:00 AM GMT-8
 RATING: HIGH
 DOMAIN: parahodinvest.net/
 CATEGORY: Disease Vector
 DESCRIPTION: This URL downloads TSPY_ZBOT.KLZQ once a user connects to it.

Related Malware