OT: blaster-e, kimble.org, 127.0.0.1

shrek-m at gmx.de shrek-m at gmx.de
Thu Aug 28 21:10:43 UTC 2003


hi,

i am a little bit confused.
i get always  "127.0.0.1"  with host, dig, nslookup for  "kimble.org"

$ host kimble.org <caching-nameserver_or_different_nameservers>
kimble.org has address 127.0.0.1

do you get the same result?



http://www.sophos.com/virusinfo/analyses/w32blastere.html

    * The registry entry used has been changed to
      HKLM\Software\Microsoft\Windows\CurrentVersion\
      Run\Windows Automation
    * The target for the Distributed Denial-of-Service attack has been
      changed to kimble.org
    * The internal message has been changed to
      "I dedicate this particular strain to me ANG3L -
      hope yer enjoying yerself and dont forget the
      promise for me B/DAY !!!!."


-- 
shrek-m






More information about the test mailing list