ผมแปลได้ว่ามีบางโดเมนของผมติด malware ไม่รู้ว่าแปลถูกมั้ยครับ แล้วต้องแก้ไขยังไงเพราะตอนนี้ vps ถูก suspend อยู่น่ะครับ
หรือใครแก้ไขให้ได้สามารถแจ้งค่าใช้จ่ายมาได้เลยครับ
The domain name is used by a known strain of malware, which can be controlled by
a command and control server which runs at that address (gate.iziger.pl). This
allows a large number of compromised machines to be used as a botnet, and taking
down the physical machine will not disable the botnet’s C&C capabilities if its
operators are simply able to point gate.iziger.pl to a different IP address.
Therefore, the most sensible and responsible course of action would be to
suspend the domain name registration.
The ongoing malware attack attempts to spread via an instant messaging client
provided
by our customer, Skype. Once infected, a victim’s computer appears to
communicate with the following server:
The behaviour of the malware, and a list of domains involved in the attacks, are
described in these articles:
http://www.threatexpert.com/report.aspx?md5=80037d529fc9e777b893b967f0703b6e
Would it be possible to have the malicious domain taken down as soon as
possible?
Please note that the server is currently accepting IRC client connections on
5050, which is consistent with the description of the malware.
We are contacting you because you appear to be an upstream provider according to a sample traceroute of the domain:
10 spectrum-networks-gw.ip4.tinet.net (216.221.156.42) 152.827 ms 154.192 ms 152.636 ms
11 sentris-1000M-SEA-1.demarc.spectrumnet.us (208.76.184.210) 152.572 ms 155.330 ms 156.479 ms
12 x15.up2vps.com (63.223.107.57) 153.745 ms 156.265 ms 155.739 ms
13 mad-army.co.uk (63.223.107.62) 153.909 ms 153.825 ms 156.971