<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://msmvps.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Variant of Nuwar/Storm worm. 10 out of 32 detects it</title><link>http://msmvps.com/blogs/donna/archive/2007/12/30/variant-of-nuwar-storm-worm-10-out-of-32-detects-it.aspx</link><description>See earlier report on this happynewyear2008.exe where 14 out of 32 will detect a variant of storm worm. Today, I&amp;#39;ve been deleting email that contains link to download an infected file: Domain is familypostcards2008.com Only 10 (at the time of this</description><dc:language>en</dc:language><generator>CommunityServer 2008.5 SP2 (Build: 40407.4157)</generator><item><title>re: Variant of Nuwar/Storm worm. 10 out of 32 detects it</title><link>http://msmvps.com/blogs/donna/archive/2007/12/30/variant-of-nuwar-storm-worm-10-out-of-32-detects-it.aspx#1427935</link><pubDate>Sun, 30 Dec 2007 23:06:38 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:1427935</guid><dc:creator>anonymous coward (again)</dc:creator><description>&lt;p&gt;New storm domain appeared yesterday.&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Domain Name: FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Registrar: ANO REGIONAL NETWORK INFORMATION CENTER DBA RU&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Whois Server: whois.nic.ru&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Referral URL: &lt;a href="http://www.nic.ru/" target="_new" rel="nofollow"&gt;http://www.nic.ru&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS10.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS11.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS12.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS13.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS2.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS3.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS4.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS5.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS6.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS7.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS8.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Name Server: NS9.FRESHCARDS2008.COM&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Status: clientTransferProhibited&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Updated Date: 29-dec-2007&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Creation Date: 29-dec-2007&lt;/p&gt;
&lt;p&gt;&amp;nbsp; Expiration Date: 29-dec-2008&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://msmvps.com/aggbug.aspx?PostID=1427935" width="1" height="1"&gt;</description></item></channel></rss>