Warning! nasty one

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
news:favdgl$n9o$1@blackhelicopter.databasix.com:

> I've seen this thing change group policy, expire passwords and modify
> the boot.ini. Warning Newbie's don't go here or you will be asking for
> help to get rid of it. 64_201_199_24 it arrives in email claiming to
> be a youtube video. Dustin you like **** like this have fun.
>
>

Hi again PcButts,

Any chance you will send the file for analysis?

If you will, you can send it to my gmail address if you will zip the file
(s), and encrypt them and rename the .zip to .dat or something so google
won't complain. I'd appreciate any cooperation from you that your willing
to give.


--
################################################## ##
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
Email: bughunter.dustin@gmail.com
Web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml
################################################## ##

[pcbutts1]

You can get it from the link I posted.


--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Dustin Cook" <bughunter.dustin@gmail.com> wrote in message
news:Xns999E8ACE7734HHI2948AJD832@69.28.186.121...
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in
> news:favdgl$n9o$1@blackhelicopter.databasix.com:
>
>> I've seen this thing change group policy, expire passwords and modify
>> the boot.ini. Warning Newbie's don't go here or you will be asking for
>> help to get rid of it. 64_201_199_24 it arrives in email claiming to
>> be a youtube video. Dustin you like **** like this have fun.
>>
>>
>
> Hi again PcButts,
>
> Any chance you will send the file for analysis?
>
> If you will, you can send it to my gmail address if you will zip the file
> (s), and encrypt them and rename the .zip to .dat or something so google
> won't complain. I'd appreciate any cooperation from you that your willing
> to give.
>
>
> --
> ################################################## ##
> Dustin Cook
> Author of BugHunter - MalWare Removal Tool - v2.2c
> Email: bughunter.dustin@gmail.com
> Web..: http://bughunter.it-mate.co.uk
> Pad..: http://bughunter.it-mate.co.uk/pad.xml
> ################################################## ##

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in news:fbc9gd$l1r$1
@blackhelicopter.databasix.com:

> You can get it from the link I posted.

I cannot seem to gain access to anything at that address.
If you still have a viable sample of it and wouldn't mind sending it along
for analysis, I would appreciate it.


--
################################################## ##
Dustin Cook
Author of BugHunter - MalWare Removal Tool - v2.2c
Email: bughunter.dustin@gmail.com
Web..: http://bughunter.it-mate.co.uk
Pad..: http://bughunter.it-mate.co.uk/pad.xml
################################################## ##

[pcbutts1]

I deleted it.

--

Newsgroup Trolls. Read about mine here http://www.pcbutts1.com/downloads
The list grows. Leythos the stalker http://www.leythosthestalker.com, David
H. Lipman, Max M Wachtell III aka What's in a Name?, Fitz,
Rhonda Lea Kirk, Meat Plow, F Kwatu F, George Orwell



"Dustin Cook" <bughunter.dustin@gmail.com> wrote in message
news:Xns999EC04D02FE0HHI2948AJD832@69.28.186.121.. .
> "pcbutts1" <pcbutts1@leythosthestalker.com> wrote in news:fbc9gd$l1r$1
> @blackhelicopter.databasix.com:
>
>> You can get it from the link I posted.
>
> I cannot seem to gain access to anything at that address.
> If you still have a viable sample of it and wouldn't mind sending it along
> for analysis, I would appreciate it.
>
>
> --
> ################################################## ##
> Dustin Cook
> Author of BugHunter - MalWare Removal Tool - v2.2c
> Email: bughunter.dustin@gmail.com
> Web..: http://bughunter.it-mate.co.uk
> Pad..: http://bughunter.it-mate.co.uk/pad.xml
> ################################################## ##

[Dustin Cook]

"pcbutts1" <pcbutts1@leythosthestalker.com> wrote in news:fbcr9o$2rr$1
@blackhelicopter.databasix.com:

> I deleted it.
>

Ah well. Maybe next time.


--
Dustin Cook, Author of BugHunter - MalWare Removal Tool - v2.2c
Email.: bughunter.dustin@gmail.com
Web...: http://bughunter.it-mate.co.uk
Pad...: http://bughunter.it-mate.co.uk/pad.xml
PGP...: http://bughunter.it-mate.co.uk/bughunter.dustin.txt

[Tofus-No-One]

On 09/01/2007 05:48 PM, Dustin Cook wrote:
>
> I cannot seem to gain access to anything at that address.
> If you still have a viable sample of it and wouldn't mind sending it along
> for analysis, I would appreciate it.
>
>

I don't know what group you're reading, so I crossposted.

I just got another spam linking to ip address
69: 251: 110: 180

Both /labor.exe and /file.php might interest you.