hi,
i am a little bit confused.
i get always "127.0.0.1" with host, dig, nslookup for "kimble.org"
$ host
kimble.org <caching-nameserver_or_different_nameservers>
kimble.org has address 127.0.0.1
do you get the same result?
http://www.sophos.com/virusinfo/analyses/w32blastere.html
* The registry entry used has been changed to
HKLM\Software\Microsoft\Windows\CurrentVersion\
Run\Windows Automation
* The target for the Distributed Denial-of-Service attack has been
changed to
kimble.org
* The internal message has been changed to
"I dedicate this particular strain to me ANG3L -
hope yer enjoying yerself and dont forget the
promise for me B/DAY !!!!."
--
shrek-m