Jose, KrCERT are not on NSP-SEC, AFAIK. If cert at krcert.or.kr doesn't do the trick, let me know and I'd be happy to try via our contacts. Regards, Rob. > ping krcert ... botnet at irc://61.98.131.70/#romania ... > > malcode: > hxxp://194187182161.os2.kn.pl/apache2-default/hallmark.exe > > 9318 | 61.98.131.70 | HANARO-AS Hanaro Telecom Inc.