full-disclosure - REGUSTERFLY To The White Courtesy Phone Please? (Was: Re: Virus on web site)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050802014233.T8473@ubzr.zsa.bet>
Date: Tue Aug  2 07:45:51 2005
From: measl at mfn.org (J.A. Terranson)
Subject: REGUSTERFLY To The White Courtesy Phone Please? (Was: Re:
	Virus on web site)


On Tue, 2 Aug 2005, Peter B. Harvey (Information Security) wrote:

> Hi all,
>
> This virus at the time of my posting this is only detedted by
> Kasperski and I cannot find any detail on the virus. Came in the
> email as given below.
>
> URL for the virus http://www.alias-search.com/images/msits.exe
> Also found was the following url also the same virus
> http://www.alias-search.com/images/msitsa.exe
>
> Kasperski detects it as  msits.exe - infected by
> Backdoor.Win32.Haxdoor.dw
>
> Anyone with info on this virus?

No, but I have some interesting info on the *domain* upon which you
found this virus:

Registration Service Provided By: Registerfly.com
Contact: support@...isterflysupport.com
Visit: http://www.registerfly.com

Domain name: alias-search.com

Registrant Contact:
   Canada/U.S.AdvertisingCenter
   Claudia Ganzon (advertising@...adausmail.com)
   +1.9052977264
   Fax:
   209graceave
   Hamilton, ON L8H3X4
   CA

Administrative Contact:
   Canada/U.S.AdvertisingCenter
   Claudia Ganzon (advertising@...adausmail.com)
   +1.9052977264
   Fax:
   209graceave
   Hamilton, ON L8H3X4
   CA

Technical Contact:
   Canada/U.S.AdvertisingCenter
   Claudia Ganzon (advertising@...adausmail.com)
   +1.9052977264
   Fax:
   209graceave
   Hamilton, ON L8H3X4
   CA

Billing Contact:
   Canada/U.S.AdvertisingCenter
   Claudia Ganzon (advertising@...adausmail.com)
   +1.9052977264
   Fax:
   209graceave
   Hamilton, ON L8H3X4
   CA

Status: Active

Name Servers:
   NS5.WEBSITEWELCOME.COM
   NS6.WEBSITEWELCOME.COM

Creation date: 23 Mar 2005 18:08:26
Expiration date: 23 Mar 2006 18:08:26

-- 
Yours,

J.A. Terranson
sysadmin@....org
0xBD4A95BF


I like the idea of belief in drug-prohibition as a religion in that it is
a strongly held belief based on grossly insufficient evidence and
bolstered by faith born of intuitions flowing from the very beliefs they
are intended to support.

don zweig, M.D.