(Klik bovenstaande afbeelding aan voor een vergroting!)
Registration Service Provided By: ESTDOMAINS INC
Domain Name: HDTV-ONLINERIP.COM
Registrant:
PrivacyProtect.org - Moergestel - NL
Creation Date: 11-Apr-2008
Expiration Date: 11-Apr-2009
Domain servers in listed order:
ns2.hdtv-onlinerip.com
ns1.hdtv-onlinerip.com

De trojan-file wordt nu gedownload vanaf GlobalSoftwareAgreement (what's in a name ...):
Registration Service Provided By: ESTDOMAINS INC
Domain Name: GLOBALSOFTWAREAGREEMENT.COM
Registrant: PrivacyProtect.org - Moergestel - NL
Creation Date: 11-Apr-2008
Expiration Date: 11-Apr-2009
Domain servers in listed order:
ns2.globalsoftwareagreement.com
ns1.globalsoftwareagreement.com


Date: april 12 2008
File size: 93710 bytes
MD5...: d5abdc969ecb81cf757c7509a65477b8
eSafe - Suspicious File
eTrust-Vet - Win32/Burgspill!generic
F-Secure - Trojan-Downloader.Win32.Delf.goh
Fortinet - W32/Fake.B!tr.dldr
Ikarus - Virus.Win32.Delf.JHW
Kaspersky - Trojan-Downloader.Win32.Delf.goh
Microsoft - Trojan:Win32/Delflob.I
Panda - Suspicious file
Sophos - Mal/DelpDldr-E
VBA32 - suspected of Win32.Trojan.Downloader