An¨¢lisis realizado por : Kenneth Guang Zheng Lee

 Fecha/hora de bloqueo de la URL jueves, 2 de mayo de 2013 18:55:00 GMT-8
 Clasificaci¨®n: : High
 Dominio : richlab.pl
&²Ô²ú²õ±è;°ä²¹³Ù±ð²µ´Ç°ù¨ª²¹: Disease Vector
&²Ô²ú²õ±è;¶Ù±ð²õ³¦°ù¾±±è³¦¾±¨®²Ô:

BKDR_LIFTOH.DLF connects to this URL to send and receive commands from a remote malicious user. It spreads by using two worms, which use multi-protocol IM apps like Quiet Internet Pager and Digsby.