[nsp-sec] ACK 1653 - W32.Waledac IPs

[Veronika Berglund]

Thanks! ACK for AS1653

Rgds
Veronika Berglund
SUNET CERT

On 7 Jan 2009 at 19:36, Gabriel Iovino wrote:

> All of these IPs should be offering up the W32.Waledac Worm or at the
> very least hosting "card.exe" over http. I say *should* as I
> programmatically verified these from larger data sets.
> 
> Each IP I spot checked was offering up card.exe (e.g. http://<ip
> address>/card.exe) at the timestamp given.
> 
>