A Day in the Life of...

The latest virus running around verizon.net locally in Dalls was wmsoftnnnnn.exe where nnnnn was a random number between 00000-99999. It was likely this IRCbot characterized by virustotal.com:

File 2e4d67cf6684e55e74a4569c0908009d received on 10.01.2007 10:21:40 (CET)
Result: 23/32 (71.88%)

Antivirus Version Last Update Result
AhnLab-V3 2007.10.1.0 2007.10.01 Win32/IRCBot.worm.23102
AntiVir 7.6.0.18 2007.10.01 TR/PCK.CPEX-based.F.34
Authentium 4.93.8 2007.10.01 -
Avast 4.7.1043.0 2007.09.30 Win32:Rizo-E
AVG 7.5.0.488 2007.10.01 IRC/BackDoor.SdBot3.RHE
BitDefender 7.2 2007.10.01 Backdoor.Rizo.A
CAT-QuickHeal 9.00 2007.09.29 Trojan.CPEX.f
ClamAV 0.91.2 2007.10.01 -
DrWeb 4.33 2007.09.30 Trojan.Inject.251
eSafe 7.0.15.0 2007.09.30 Win32.CPEX-based.f
eTrust-Vet 31.2.5174 2007.09.30 Win32/Rbot.HQX
Ewido 4.0 2007.09.30 -
FileAdvisor 1 2007.10.01 -
Fortinet 3.11.0.0 2007.10.01 W32/Qhost.B!tr
F-Prot 4.3.2.48 2007.10.01 -
F-Secure 6.70.13030.0 2007.10.01 Packed.Win32.CPEX-based.f
Ikarus T3.1.1.12 2007.10.01 Backdoor.Rizo.A
Kaspersky 7.0.0.125 2007.10.01 Packed.Win32.CPEX-based.f
McAfee 5130 2007.09.28 -
Microsoft 1.2803 2007.10.01 -
NOD32v2 2561 2007.10.01 a variant of Win32/Rbot
Norman 5.80.02 2007.09.28 W32/Malware.AJLM
Panda 9.0.0.4 2007.10.01 W32/Sdbot.LBY.worm
Prevx1 V2 2007.10.01 -
Rising 19.43.00.00 2007.10.01 Trojan.Win32.Crypt.exf
Sophos 4.22.0 2007.10.01 Troj/QHost-B
Sunbelt 2.2.907.0 2007.10.01 Backdoor.Rizo.A
Symantec 10 2007.10.01 W32.Spybot.Worm
TheHacker 6.2.6.075 2007.10.01 Trojan/CPEX-based.f
VBA32 3.12.2.4 2007.10.01 Trojan-PSW.Win32.OnLineGames.bs
VirusBuster 4.3.26:9 2007.09.30 -
Webwasher-Gateway 6.0.1 2007.10.01 Trojan.PCK.CPEX-based.F.34

Additional information
File size: 132096 bytes
MD5: 2e4d67cf6684e55e74a4569c0908009d
SHA1: 5c1d44753d79a0a73704fb7ac009e13d51c2d4ad
packers: PECompact
packers: PECOMPACT
packers: PecBundle, PECompact
packers: PE_Patch.PECompact, PecBundle, PECompact


This is the worm's activity over September,2007:

Date/Time Host
[2007-09-08T02:29:35] 71.96.244.107
[2007-09-08T03:27:12] 71.96.244.107
[2007-09-08T03:37:21] 71.96.244.107
[2007-09-08T03:41:51] 71.96.244.107
[2007-09-08T03:52:25] 71.96.244.107
[2007-09-08T04:24:10] 71.96.244.107
[2007-09-08T05:59:49] 71.96.244.107
[2007-09-08T06:57:49] 71.96.244.107
[2007-09-08T07:14:29] 71.96.244.107
[2007-09-08T08:17:35] 71.96.244.107
[2007-09-08T09:12:00] 71.96.244.107
[2007-09-08T10:56:49] 71.96.244.107
[2007-09-08T11:13:23] 71.96.244.107
[2007-09-08T12:19:58] 71.96.244.107
[2007-09-08T12:35:31] 71.96.244.107
[2007-09-08T14:11:02] 71.96.244.107
[2007-09-08T15:32:08] 71.96.244.107
[2007-09-08T15:43:28] 71.96.244.107
[2007-09-08T17:49:02] 71.96.244.107
[2007-09-08T18:50:53] 71.96.244.107
[2007-09-08T18:55:18] 71.96.244.107
[2007-09-08T19:21:06] 71.96.42.178
[2007-09-08T20:21:17] 71.96.244.107
[2007-09-08T22:33:23] 71.96.244.107
[2007-09-09T04:34:30] 71.96.31.207
[2007-09-09T06:34:47] 71.96.31.207
[2007-09-09T06:57:52] 71.96.31.207
[2007-09-09T06:59:55] 71.96.227.91
[2007-09-09T07:03:43] 71.96.227.91
[2007-09-09T07:04:57] 71.96.227.91
[2007-09-09T07:16:09] 71.96.31.207
[2007-09-09T07:43:39] 71.96.31.207
[2007-09-09T09:31:49] 71.96.31.207
[2007-09-09T09:43:01] 71.96.31.207
[2007-09-09T09:59:20] 71.96.31.207
[2007-09-09T10:26:13] 71.96.31.207
[2007-09-09T10:27:33] 71.96.31.207
[2007-09-09T10:49:37] 71.96.31.207
[2007-09-09T10:52:54] 71.96.31.207
[2007-09-09T11:19:33] 71.96.31.207
[2007-09-09T11:29:50] 71.96.31.207
[2007-09-09T12:44:52] 71.96.31.207
[2007-09-09T12:47:23] 71.96.31.207
[2007-09-09T14:38:34] 71.96.31.207
[2007-09-09T15:00:31] 71.96.31.207
[2007-09-09T16:02:22] 71.96.31.207
[2007-09-09T16:17:18] 71.96.31.207
[2007-09-09T16:36:12] 71.96.31.207
[2007-09-09T17:14:03] 71.96.31.207
[2007-09-09T17:42:11] 71.96.31.207
[2007-09-09T18:32:06] 71.96.31.207
[2007-09-09T22:23:26] 71.96.33.99
[2007-09-09T23:37:40] 71.96.139.24
[2007-09-10T02:19:19] 71.96.64.121
[2007-09-10T02:27:33] 71.96.64.121
[2007-09-10T03:18:58] 71.96.75.149
[2007-09-10T23:03:21] 71.96.251.9
[2007-09-10T23:09:32] 71.96.251.9
[2007-09-10T23:40:23] 71.96.251.9
[2007-09-11T00:00:26] 71.96.150.248
[2007-09-11T00:00:40] 71.96.150.248
[2007-09-11T00:07:38] 71.96.251.9
[2007-09-11T00:28:15] 71.96.150.248
[2007-09-11T00:50:05] 71.96.150.248
[2007-09-11T01:00:07] 71.96.150.248
[2007-09-11T01:02:31] 71.96.150.248
[2007-09-11T01:05:05] 71.96.150.248
[2007-09-11T01:49:58] 71.96.251.9
[2007-09-11T01:57:28] 71.96.251.9
[2007-09-11T02:02:42] 71.96.150.248
[2007-09-11T02:07:27] 71.96.251.9
[2007-09-11T02:14:41] 71.96.150.248
[2007-09-11T02:35:58] 71.96.251.9
[2007-09-11T02:39:52] 71.96.251.9
[2007-09-11T03:01:12] 71.96.150.248
[2007-09-11T03:30:53] 71.96.150.248
[2007-09-11T04:08:08] 71.96.150.248
[2007-09-11T04:29:11] 71.96.150.248
[2007-09-11T05:12:35] 71.96.150.248
[2007-09-11T06:08:48] 71.96.150.248
[2007-09-11T06:23:57] 71.96.251.9
[2007-09-11T06:40:31] 71.96.251.9
[2007-09-11T06:41:46] 71.96.251.9
[2007-09-11T06:44:58] 71.96.251.9
[2007-09-11T07:17:58] 71.96.251.9
[2007-09-11T07:29:22] 71.96.150.248
[2007-09-11T07:32:09] 71.96.150.248
[2007-09-11T08:10:56] 71.96.150.248
[2007-09-11T09:40:25] 71.96.150.248
[2007-09-11T09:52:04] 71.96.150.248
[2007-09-11T10:20:21] 71.96.150.248
[2007-09-11T21:34:47] 71.96.34.128
[2007-09-11T22:20:05] 71.96.34.128
[2007-09-11T22:24:07] 71.96.34.128
[2007-09-12T00:08:29] 71.96.69.127
[2007-09-12T00:51:40] 71.96.238.174
[2007-09-12T01:00:53] 71.96.238.174
[2007-09-12T01:48:28] 71.96.238.174
[2007-09-12T01:48:32] 71.96.238.174
[2007-09-13T00:06:22] 71.96.68.161
[2007-09-13T00:33:44] 71.96.251.76
[2007-09-13T00:38:18] 71.96.251.76
[2007-09-13T00:57:13] 71.96.68.161
[2007-09-13T00:57:35] 71.96.251.76
[2007-09-13T01:03:15] 71.96.251.76
[2007-09-13T01:20:54] 71.96.251.76
[2007-09-15T23:00:07] 71.96.239.240
[2007-09-16T00:11:42] 71.96.239.240
[2007-09-16T01:47:33] 71.96.239.240
[2007-09-16T02:19:38] 71.96.239.240
[2007-09-16T03:10:55] 71.96.239.240
[2007-09-16T04:26:50] 71.96.239.240
[2007-09-16T04:34:13] 71.96.239.240
[2007-09-17T05:17:40] 71.96.64.151
[2007-09-17T05:59:07] 71.96.73.145
[2007-09-18T18:41:05] 71.96.11.182
[2007-09-18T19:09:16] 71.96.11.182
[2007-09-18T19:49:15] 71.96.11.182
[2007-09-18T20:22:33] 71.96.11.182
[2007-09-18T20:55:17] 71.96.11.182
[2007-09-18T20:56:22] 71.96.11.182
[2007-09-18T21:11:48] 71.96.11.182
[2007-09-18T21:29:12] 71.96.11.182
[2007-09-18T21:46:04] 71.96.248.69
[2007-09-18T22:31:17] 71.96.248.69
[2007-09-18T23:44:11] 71.96.248.69
[2007-09-19T00:49:36] 71.96.87.214
[2007-09-19T01:56:16] 71.96.250.95
[2007-09-19T02:02:11] 71.96.250.95
[2007-09-19T02:05:36] 71.96.250.95
[2007-09-19T02:11:56] 71.96.250.95
[2007-09-19T02:15:33] 71.96.250.95
[2007-09-19T02:19:51] 71.96.250.95
[2007-09-19T03:24:57] 71.96.87.214
[2007-09-19T04:12:26] 71.96.157.52
[2007-09-19T05:21:27] 71.96.157.52
[2007-09-19T05:22:11] 71.96.157.52
[2007-09-19T05:31:35] 71.96.157.52
[2007-09-19T05:33:32] 71.96.66.246
[2007-09-19T05:37:00] 71.96.157.52
[2007-09-19T05:37:33] 71.96.157.52
[2007-09-19T06:17:33] 71.96.66.246
[2007-09-19T06:32:36] 71.96.66.246
[2007-09-19T06:52:25] 71.96.66.246
[2007-09-19T09:08:04] 71.96.157.52
[2007-09-19T11:16:52] 71.96.157.52
[2007-09-19T11:33:28] 71.96.157.52
[2007-09-19T12:00:09] 71.96.157.52
[2007-09-19T13:11:01] 71.96.157.52
[2007-09-19T14:39:24] 71.96.157.52
[2007-09-19T15:40:40] 71.96.157.52
[2007-09-19T15:42:06] 71.96.157.52
[2007-09-19T16:00:38] 71.96.157.52
[2007-09-19T17:30:32] 71.96.157.52
[2007-09-19T17:49:21] 71.96.157.52
[2007-09-19T18:31:09] 71.96.157.52
[2007-09-19T19:10:05] 71.96.157.52
[2007-09-19T22:29:21] 71.96.20.151
[2007-09-19T22:46:12] 71.96.20.151
[2007-09-19T23:20:32] 71.96.20.151
[2007-09-20T00:19:06] 71.96.253.74
[2007-09-20T00:24:59] 71.96.253.74
[2007-09-20T00:46:42] 71.96.253.74
[2007-09-20T00:48:40] 71.96.253.74
[2007-09-20T01:14:33] 71.96.253.74
[2007-09-20T01:34:35] 71.96.162.112
[2007-09-20T01:36:58] 71.96.253.74
[2007-09-20T02:07:26] 71.96.162.112
[2007-09-20T02:26:33] 71.96.28.53
[2007-09-20T02:28:30] 71.96.90.117
[2007-09-20T02:54:03] 71.96.162.112
[2007-09-20T03:00:24] 71.96.253.74
[2007-09-20T03:03:07] 71.96.162.112
[2007-09-20T03:40:58] 71.96.253.74
[2007-09-20T03:59:10] 71.96.253.74
[2007-09-20T04:09:22] 71.96.253.74
[2007-09-20T04:09:44] 71.96.253.74
[2007-09-20T07:40:45] 71.96.157.52
[2007-09-20T11:34:11] 71.96.7.222
[2007-09-20T12:14:07] 71.96.7.222
[2007-09-20T22:24:44] 71.103.173.36
[2007-09-21T02:25:57] 71.96.130.8
[2007-09-21T02:36:23] 71.96.130.8
[2007-09-21T02:37:45] 71.96.130.8
[2007-09-21T02:53:05] 71.96.130.8
[2007-09-21T03:37:48] 71.96.93.104
[2007-09-21T03:41:48] 71.96.130.8
[2007-09-21T03:42:26] 71.96.130.8
[2007-09-21T03:48:29] 71.96.93.104
[2007-09-21T04:52:37] 71.96.10.208
[2007-09-21T12:07:18] 71.96.159.11
[2007-09-21T13:36:50] 71.96.22.6
[2007-09-21T14:00:32] 71.96.22.6
[2007-09-21T14:00:35] 71.96.22.6
[2007-09-21T15:27:12] 71.96.22.6
[2007-09-21T15:28:16] 71.96.22.6
[2007-09-21T16:22:26] 71.96.22.6
[2007-09-21T16:52:56] 71.96.22.6
[2007-09-21T17:46:30] 71.96.22.6
[2007-09-21T18:12:42] 71.96.22.6
[2007-09-21T19:00:25] 71.96.22.6
[2007-09-21T19:18:41] 71.96.22.6
[2007-09-21T19:47:41] 71.96.12.243
[2007-09-21T19:54:48] 71.96.12.243
[2007-09-21T20:42:33] 71.96.236.240
[2007-09-21T20:52:38] 71.96.22.6
[2007-09-21T20:54:37] 71.96.236.240
[2007-09-21T22:13:39] 71.96.22.6
[2007-09-21T22:16:43] 71.96.22.6
[2007-09-21T23:01:02] 71.96.93.240
[2007-09-21T23:25:18] 71.96.93.240
[2007-09-21T23:32:27] 71.96.93.240
[2007-09-22T00:02:29] 71.96.22.6
[2007-09-22T00:29:58] 71.96.22.6
[2007-09-22T00:57:46] 71.96.22.6
[2007-09-22T01:05:03] 71.96.22.6
[2007-09-22T01:48:04] 71.96.22.6
[2007-09-22T02:39:17] 71.96.22.6
[2007-09-22T03:54:48] 71.96.83.186
[2007-09-22T04:06:39] 71.96.83.186
[2007-09-22T04:06:46] 71.96.83.186
[2007-09-22T04:23:47] 71.96.83.186
[2007-09-22T05:00:10] 71.96.65.101
[2007-09-22T05:01:14] 71.96.22.6
[2007-09-22T06:32:43] 71.96.69.112
[2007-09-22T07:06:07] 71.96.69.112
[2007-09-22T07:23:32] 71.96.69.112
[2007-09-22T10:37:47] 71.96.4.133
[2007-09-22T10:49:43] 71.96.4.133
[2007-09-22T10:54:59] 71.96.4.133
[2007-09-22T11:13:08] 71.96.4.133
[2007-09-22T11:32:58] 71.96.4.133
[2007-09-22T12:26:29] 71.96.4.133
[2007-09-22T14:20:06] 71.96.236.240
[2007-09-22T14:32:53] 71.96.236.240
[2007-09-22T14:41:33] 71.96.236.240
[2007-09-22T15:21:11] 71.96.172.193
[2007-09-22T15:33:12] 71.96.236.240
[2007-09-22T16:03:26] 71.96.172.193
[2007-09-22T16:25:46] 71.96.172.193
[2007-09-22T16:37:22] 71.96.236.240
[2007-09-22T16:44:57] 71.96.27.109
[2007-09-22T16:54:47] 71.96.91.176
[2007-09-22T17:00:03] 71.96.172.193
[2007-09-22T17:13:08] 71.96.172.193
[2007-09-22T17:20:14] 71.96.172.193
[2007-09-22T17:24:06] 71.96.27.109
[2007-09-22T17:25:40] 71.96.172.193
[2007-09-22T17:26:44] 71.96.172.193
[2007-09-22T17:31:42] 71.96.236.240
[2007-09-22T17:39:12] 71.96.27.109
[2007-09-22T18:03:31] 71.96.27.109
[2007-09-22T18:27:39] 71.96.91.176
[2007-09-22T18:36:41] 71.96.91.176
[2007-09-22T19:27:08] 71.96.91.176
[2007-09-22T20:02:19] 71.96.37.199
[2007-09-22T20:04:24] 71.96.236.240
[2007-09-22T20:39:42] 71.96.37.199
[2007-09-22T20:42:20] 71.96.37.199
[2007-09-22T21:09:52] 71.96.37.199
[2007-09-22T21:17:26] 71.96.37.199
[2007-09-22T21:17:43] 71.96.37.199
[2007-09-22T21:31:36] 71.96.37.199
[2007-09-22T23:07:16] 71.96.236.240
[2007-09-22T23:49:46] 71.96.236.240
[2007-09-23T01:41:46] 71.96.236.240
[2007-09-23T01:44:12] 71.96.169.126
[2007-09-23T02:50:44] 71.96.236.240
[2007-09-23T03:48:56] 71.96.236.240
[2007-09-23T05:10:50] 71.96.2.151
[2007-09-23T05:23:30] 71.96.236.240
[2007-09-23T06:53:56] 71.96.65.99
[2007-09-23T07:07:05] 71.96.137.48
[2007-09-23T07:17:24] 71.96.137.48
[2007-09-23T08:00:33] 71.96.137.48
[2007-09-23T08:04:52] 71.96.137.48
[2007-09-23T08:10:21] 71.96.137.48
[2007-09-23T08:48:23] 71.96.137.48
[2007-09-23T17:47:31] 71.96.83.108
[2007-09-23T17:56:47] 71.96.247.149
[2007-09-23T17:58:27] 71.96.247.149
[2007-09-23T18:07:54] 71.96.247.149
[2007-09-23T18:09:10] 71.96.247.149
[2007-09-23T18:35:22] 71.96.247.149
[2007-09-23T19:03:03] 71.96.247.149
[2007-09-23T20:06:45] 71.96.134.87
[2007-09-23T20:54:05] 71.96.20.68
[2007-09-23T21:11:40] 71.96.42.142
[2007-09-23T21:13:27] 71.96.42.142
[2007-09-23T21:15:57] 71.96.42.142
[2007-09-23T21:27:20] 71.96.134.87
[2007-09-23T21:31:09] 71.96.42.142
[2007-09-23T21:38:01] 71.96.20.68
[2007-09-23T21:52:46] 71.96.42.142
[2007-09-23T21:55:19] 71.96.134.87
[2007-09-23T22:05:25] 71.96.42.142
[2007-09-23T22:31:36] 71.96.42.142
[2007-09-23T22:36:53] 71.96.247.149
[2007-09-23T22:44:23] 71.96.42.142
[2007-09-23T22:44:39] 71.96.134.87
[2007-09-23T22:52:17] 71.96.134.87
[2007-09-23T22:52:41] 71.96.247.149
[2007-09-23T23:10:14] 71.96.247.149
[2007-09-23T23:16:09] 71.96.134.87
[2007-09-23T23:18:25] 71.96.134.87
[2007-09-23T23:21:54] 71.96.134.87
[2007-09-23T23:26:20] 71.96.247.149
[2007-09-23T23:33:36] 71.96.247.149
[2007-09-24T00:04:35] 71.96.247.149
[2007-09-24T01:11:07] 71.96.247.149
[2007-09-24T02:10:20] 71.96.161.121
[2007-09-24T02:19:59] 71.96.161.121
[2007-09-24T02:38:37] 71.96.25.145
[2007-09-24T04:51:00] 71.96.6.94
[2007-09-24T04:52:51] 71.96.6.94
[2007-09-24T05:42:24] 71.96.146.124
[2007-09-24T06:35:22] 71.96.146.124
[2007-09-24T06:57:20] 71.96.146.124
[2007-09-24T06:58:04] 71.96.146.124
[2007-09-24T08:15:05] 71.96.146.124
[2007-09-24T08:37:47] 71.96.146.124
[2007-09-24T09:21:10] 71.96.146.124
[2007-09-24T10:44:24] 71.96.146.124
[2007-09-24T11:48:18] 71.96.11.23
[2007-09-24T11:50:27] 71.96.146.124
[2007-09-24T12:02:26] 71.96.146.124
[2007-09-24T12:29:14] 71.96.146.124
[2007-09-24T13:08:58] 71.96.11.23
[2007-09-24T13:20:14] 71.96.146.124
[2007-09-24T13:46:37] 71.96.146.124
[2007-09-24T14:06:28] 71.96.146.124
[2007-09-24T16:26:51] 71.96.146.124
[2007-09-24T17:48:37] 71.96.146.124
[2007-09-24T18:25:24] 71.96.146.124
[2007-09-24T20:15:38] 71.96.146.124
[2007-09-24T20:42:56] 71.36.73.120
[2007-09-24T22:27:05] 71.96.38.219
[2007-09-24T22:29:52] 71.96.38.219
[2007-09-24T22:34:21] 71.96.134.87
[2007-09-24T22:49:43] 71.96.134.87
[2007-09-24T22:59:44] 71.96.134.87
[2007-09-24T23:05:04] 71.96.250.15
[2007-09-24T23:15:55] 71.96.250.15
[2007-09-24T23:32:08] 71.96.38.219
[2007-09-24T23:33:40] 71.96.146.124
[2007-09-24T23:44:48] 71.96.92.17
[2007-09-24T23:44:54] 71.96.92.17
[2007-09-24T23:56:08] 71.96.146.124
[2007-09-25T00:26:42] 71.96.134.87
[2007-09-25T00:41:54] 71.96.146.124
[2007-09-25T01:16:44] 71.96.73.191
[2007-09-25T01:29:24] 71.96.146.124
[2007-09-25T01:44:43] 71.96.134.87
[2007-09-25T01:47:15] 71.96.146.124
[2007-09-25T02:07:03] 71.96.146.124
[2007-09-25T02:14:54] 71.96.73.191
[2007-09-25T02:28:32] 71.96.4.101
[2007-09-25T02:33:21] 71.96.4.101
[2007-09-25T02:47:50] 71.96.73.191
[2007-09-25T03:01:20] 71.96.146.124
[2007-09-25T03:07:51] 71.96.73.191
[2007-09-25T03:16:35] 71.96.250.15
[2007-09-25T03:19:39] 71.96.168.44
[2007-09-25T03:24:37] 71.96.168.44
[2007-09-25T03:41:10] 71.96.4.101
[2007-09-25T03:53:40] 71.96.134.87
[2007-09-25T04:14:39] 71.96.73.191
[2007-09-25T04:17:31] 71.96.134.87
[2007-09-25T04:53:58] 71.96.134.87
[2007-09-25T04:54:51] 71.96.73.191
[2007-09-25T05:09:08] 71.96.73.191
[2007-09-25T05:17:17] 71.96.134.87
[2007-09-25T05:17:37] 71.96.73.191
[2007-09-25T05:34:58] 71.96.73.191
[2007-09-25T06:14:05] 71.96.134.87
[2007-09-25T06:47:15] 71.96.73.191
[2007-09-25T06:50:43] 71.96.134.87
[2007-09-25T06:55:35] 71.96.73.191
[2007-09-25T07:25:07] 71.96.73.191
[2007-09-25T07:49:03] 71.96.134.87
[2007-09-25T07:53:04] 71.96.134.87
[2007-09-25T08:19:09] 71.96.134.87
[2007-09-25T08:23:02] 71.96.134.87
[2007-09-25T08:47:39] 71.96.134.87
[2007-09-25T08:53:13] 71.96.73.191
[2007-09-25T08:56:12] 71.96.73.191
[2007-09-25T09:07:22] 71.96.73.191
[2007-09-25T09:07:28] 71.96.73.191
[2007-09-25T09:15:13] 71.96.73.191
[2007-09-25T09:28:01] 71.96.134.87
[2007-09-25T10:09:41] 71.96.134.87
[2007-09-25T10:15:43] 71.96.134.87
[2007-09-25T10:15:50] 71.96.73.191
[2007-09-25T10:36:38] 71.96.134.87
[2007-09-25T10:48:52] 71.96.73.191
[2007-09-25T11:05:57] 71.96.134.87
[2007-09-25T11:11:37] 71.96.73.191
[2007-09-25T11:11:43] 71.96.134.87
[2007-09-25T11:11:50] 71.96.73.191
[2007-09-25T11:23:20] 71.96.134.87
[2007-09-25T11:42:51] 71.96.73.191
[2007-09-25T11:50:02] 71.96.73.191
[2007-09-25T13:43:49] 71.96.134.87
[2007-09-25T14:13:29] 71.96.134.87
[2007-09-25T15:15:01] 71.96.134.87
[2007-09-25T15:16:19] 71.96.134.87
[2007-09-25T15:39:30] 71.96.73.191
[2007-09-25T16:02:23] 71.96.134.87
[2007-09-25T16:38:46] 71.96.134.87
[2007-09-25T16:39:23] 71.96.73.191
[2007-09-25T17:27:21] 71.96.134.87
[2007-09-25T18:01:20] 71.96.73.191
[2007-09-25T18:05:18] 71.96.73.191
[2007-09-25T18:18:49] 71.96.134.87
[2007-09-25T19:03:11] 71.96.73.191
[2007-09-25T19:10:20] 71.96.73.191
[2007-09-25T19:29:06] 71.96.73.191
[2007-09-25T19:42:34] 71.96.73.191
[2007-09-25T20:21:59] 71.96.73.191
[2007-09-25T20:28:22] 71.96.73.191
[2007-09-25T20:31:19] 71.96.134.87
[2007-09-25T21:02:13] 71.96.73.191
[2007-09-25T21:13:43] 71.96.134.87
[2007-09-25T21:15:38] 71.96.73.191
[2007-09-25T21:16:55] 71.96.73.191
[2007-09-25T21:17:46] 71.96.73.191
[2007-09-25T21:27:05] 71.96.73.191
[2007-09-25T22:16:09] 71.96.73.191
[2007-09-25T22:42:15] 71.96.73.191
[2007-09-26T00:27:17] 71.96.73.191
[2007-09-26T01:06:10] 71.96.73.191
[2007-09-26T01:34:41] 71.96.73.191
[2007-09-26T01:37:54] 71.96.73.191
[2007-09-26T03:28:56] 71.96.73.191
[2007-09-26T03:53:07] 71.96.73.191
[2007-09-26T03:57:03] 71.96.73.191
[2007-09-26T04:38:00] 71.96.73.191
[2007-09-26T06:09:07] 71.96.73.191
[2007-09-26T06:09:16] 71.96.73.191
[2007-09-26T07:33:23] 71.96.73.191
[2007-09-26T07:58:14] 71.96.73.191
[2007-09-26T08:34:23] 71.96.73.191
[2007-09-26T08:38:31] 71.96.73.191
[2007-09-26T09:43:10] 71.96.73.191
[2007-09-26T10:03:35] 71.96.73.191
[2007-09-26T10:03:47] 71.96.73.191
[2007-09-26T10:30:13] 71.96.73.191
[2007-09-26T10:36:09] 71.96.73.191
[2007-09-26T11:33:54] 71.96.73.191
[2007-09-26T11:40:37] 71.96.73.191
[2007-09-26T12:01:12] 71.96.73.191
[2007-09-26T13:23:24] 71.96.73.191
[2007-09-26T14:35:47] 71.96.73.191
[2007-09-26T15:24:16] 71.96.73.191
[2007-09-26T16:31:57] 71.96.73.191
[2007-09-26T16:38:50] 71.96.73.191
[2007-09-26T17:32:53] 71.96.73.191
[2007-09-26T20:23:51] 71.96.73.191
[2007-09-26T21:33:40] 71.96.73.191
[2007-09-26T22:26:37] 71.96.73.191
[2007-09-26T23:14:11] 71.96.73.191
[2007-09-26T23:29:29] 71.96.73.191
[2007-09-27T00:34:24] 71.96.73.191
[2007-09-27T00:59:27] 71.96.73.191
[2007-09-27T02:02:02] 71.96.73.191
[2007-09-27T02:08:32] 71.96.73.191
[2007-09-27T02:39:15] 71.96.73.191
[2007-09-27T04:23:00] 71.96.73.191
[2007-09-27T05:41:28] 71.96.73.191
[2007-09-27T07:16:30] 71.107.237.92
[2007-09-27T07:30:53] 71.96.73.191
[2007-09-27T08:12:30] 71.96.73.191
[2007-09-27T08:31:13] 71.96.73.191
[2007-09-27T09:03:29] 71.96.73.191
[2007-09-27T09:45:05] 71.96.73.191
[2007-09-27T09:48:03] 71.96.73.191
[2007-09-27T10:07:29] 71.96.73.191
[2007-09-27T10:52:51] 71.96.73.191
[2007-09-27T12:27:46] 71.96.73.191
[2007-09-27T12:57:57] 71.96.73.191
[2007-09-27T12:58:07] 71.96.73.191
[2007-09-27T13:01:12] 71.96.73.191
[2007-09-27T14:09:00] 71.96.73.191
[2007-09-27T14:26:29] 71.96.73.191
[2007-09-27T15:00:14] 71.96.73.191
[2007-09-27T15:19:39] 71.96.73.191
[2007-09-27T16:51:16] 71.96.73.191
[2007-09-27T18:02:14] 71.96.73.191
[2007-09-27T18:26:30] 71.96.73.191
[2007-09-27T19:37:26] 71.96.73.191
[2007-09-27T20:26:30] 71.96.73.191
[2007-09-27T22:05:57] 71.96.73.191
[2007-09-27T23:00:12] 71.96.73.191
[2007-09-27T23:28:11] 71.96.73.191
[2007-09-28T00:09:10] 71.96.73.191
[2007-09-28T01:56:52] 71.96.73.191
[2007-09-28T02:15:12] 71.96.73.191
[2007-09-28T02:20:19] 71.96.73.191
[2007-09-28T02:50:45] 71.96.73.191
[2007-09-28T03:00:45] 71.96.73.191
[2007-09-28T03:23:27] 71.96.73.191
[2007-09-28T04:04:14] 71.96.73.191
[2007-09-28T05:51:11] 71.96.73.191
[2007-09-28T08:37:02] 71.106.194.205
[2007-09-28T08:49:27] 71.96.73.191
[2007-09-28T09:34:03] 71.96.73.191
[2007-09-28T12:54:59] 71.96.8.126
[2007-09-28T13:28:39] 71.96.8.126
[2007-09-28T13:41:09] 71.96.73.191
[2007-09-28T13:42:11] 71.96.140.221
[2007-09-28T14:22:48] 71.96.73.191
[2007-09-28T14:45:12] 71.96.8.126
[2007-09-28T14:52:58] 71.96.73.191
[2007-09-28T14:54:15] 71.96.8.126
[2007-09-28T16:04:34] 71.96.73.191
[2007-09-28T16:40:11] 71.96.73.191
[2007-09-28T16:51:56] 71.96.73.191
[2007-09-28T16:55:46] 71.96.16.174
[2007-09-28T19:13:38] 71.96.17.126
[2007-09-28T19:53:49] 71.96.73.191
[2007-09-28T20:33:58] 71.96.73.191
[2007-09-28T20:43:01] 71.96.73.191
[2007-09-28T20:57:49] 71.96.35.22
[2007-09-28T20:59:23] 71.96.73.191
[2007-09-28T21:58:40] 71.96.73.191
[2007-09-28T22:38:04] 71.96.35.22
[2007-09-28T23:10:12] 71.96.73.191
[2007-09-28T23:12:41] 71.96.35.22
[2007-09-28T23:15:40] 71.96.73.191
[2007-09-28T23:19:18] 71.96.35.22
[2007-09-28T23:28:05] 71.96.35.22
[2007-09-29T01:13:00] 71.96.73.174
[2007-09-29T01:26:48] 71.96.37.231
[2007-09-29T01:31:40] 71.96.73.174
[2007-09-29T01:52:01] 71.96.73.191
[2007-09-29T02:16:42] 71.96.73.174
[2007-09-29T02:58:17] 71.96.73.174
[2007-09-29T03:33:50] 71.96.73.174
[2007-09-29T03:50:46] 71.96.73.174
[2007-09-29T05:04:16] 71.96.73.191
[2007-09-29T05:58:49] 71.96.66.65
[2007-09-29T06:17:21] 71.96.73.191
[2007-09-29T08:45:11] 71.96.73.191
[2007-09-29T08:46:52] 71.96.73.191
[2007-09-29T13:00:13] 71.96.73.191
[2007-09-29T14:16:02] 71.96.22.11
[2007-09-29T14:16:03] 71.96.22.11
[2007-09-29T14:21:27] 71.96.22.11
[2007-09-29T15:07:22] 71.96.22.11
[2007-09-29T15:08:59] 71.96.22.11
[2007-09-29T15:16:55] 71.96.73.191
[2007-09-29T15:46:49] 71.96.22.11
[2007-09-29T15:57:19] 71.96.73.191
[2007-09-29T16:19:20] 71.96.24.64
[2007-09-29T17:22:55] 71.96.73.191
[2007-09-29T17:28:54] 71.96.24.64
[2007-09-29T17:39:36] 71.96.24.64
[2007-09-29T19:18:14] 71.96.12.207
[2007-09-29T19:20:34] 71.96.73.29
[2007-09-29T19:25:44] 71.96.73.29
[2007-09-29T19:26:56] 71.96.73.29
[2007-09-29T19:34:58] 71.120.7.122
[2007-09-29T20:39:44] 71.96.12.207
[2007-09-29T22:02:31] 71.106.194.205
[2007-09-29T23:10:30] 71.96.73.191
[2007-09-29T23:40:57] 71.96.249.217
[2007-09-30T00:00:32] 71.96.249.217
[2007-09-30T00:14:35] 71.96.249.217
[2007-09-30T00:18:26] 71.96.73.191
[2007-09-30T00:31:25] 71.96.249.217
[2007-09-30T00:40:20] 71.96.73.191
[2007-09-30T01:12:12] 71.96.73.191
[2007-09-30T02:25:37] 71.96.249.217
[2007-09-30T02:58:07] 71.96.73.191
[2007-09-30T03:08:28] 71.96.31.155
[2007-09-30T03:19:11] 71.96.73.191
[2007-09-30T03:30:09] 71.96.131.201
[2007-09-30T03:33:43] 71.96.73.191
[2007-09-30T03:36:20] 71.96.31.155
[2007-09-30T03:37:14] 71.96.74.172
[2007-09-30T03:42:35] 71.96.31.155
[2007-09-30T03:47:27] 71.96.73.191
[2007-09-30T03:50:56] 71.96.249.217
[2007-09-30T04:36:16] 71.96.16.33
[2007-09-30T04:37:04] 71.96.249.217
[2007-09-30T04:37:38] 71.96.249.217
[2007-09-30T04:48:36] 71.96.16.33
[2007-09-30T04:53:21] 71.96.16.33
[2007-09-30T05:05:56] 71.96.249.217
[2007-09-30T05:08:58] 71.96.249.217
[2007-09-30T05:31:44] 71.96.249.217
[2007-09-30T05:31:51] 71.96.249.217
[2007-09-30T05:34:15] 71.96.249.217
[2007-09-30T06:01:11] 71.96.249.217
[2007-09-30T06:39:40] 71.96.249.217
[2007-09-30T06:42:16] 71.96.249.217
[2007-09-30T07:24:36] 71.96.249.217
[2007-09-30T07:41:16] 71.96.73.191
[2007-09-30T08:05:47] 71.96.73.191
[2007-09-30T09:05:59] 71.96.73.191
[2007-09-30T10:07:20] 71.96.73.191
[2007-09-30T10:07:45] 71.96.73.191
[2007-09-30T11:24:33] 71.96.73.191
[2007-09-30T12:12:43] 71.96.249.217
[2007-09-30T12:57:39] 71.96.73.191
[2007-09-30T13:46:26] 71.96.249.217
[2007-09-30T14:03:54] 71.96.73.191
[2007-09-30T14:27:58] 71.96.249.217
[2007-09-30T15:23:37] 71.96.249.217
[2007-09-30T15:40:08] 71.96.1.172
[2007-09-30T15:44:56] 71.96.1.172
[2007-09-30T16:10:19] 71.96.1.172
[2007-09-30T16:10:50] 71.96.249.217
[2007-09-30T16:24:00] 71.96.249.217
[2007-09-30T16:29:44] 71.96.1.172
[2007-09-30T16:38:23] 71.96.1.172
[2007-09-30T16:54:17] 71.96.1.172
[2007-09-30T17:12:08] 71.96.249.217
[2007-09-30T18:37:04] 71.96.249.217
[2007-09-30T18:40:03] 71.96.17.157
[2007-09-30T19:02:47] 71.96.249.217
[2007-09-30T19:22:49] 71.96.249.217
[2007-09-30T20:17:27] 71.96.249.217
[2007-09-30T20:23:17] 71.96.249.217
[2007-09-30T20:32:46] 71.96.29.197
[2007-09-30T20:34:35] 71.96.29.197
[2007-09-30T21:06:24] 71.96.17.157
[2007-09-30T21:17:43] 71.96.29.197
[2007-09-30T21:47:32] 71.96.73.191
[2007-09-30T22:28:25] 71.96.249.217
[2007-09-30T22:37:46] 71.96.177.129
[2007-09-30T22:48:00] 71.96.29.197
[2007-09-30T22:53:37] 71.96.249.217
[2007-09-30T23:13:28] 71.96.249.217
[2007-09-30T23:44:30] 71.96.249.217
[2007-09-30T23:54:46] 71.96.128.131
[2007-10-01T00:15:40] 71.96.128.131
[2007-10-01T00:37:22] 71.96.128.131
[2007-10-01T00:54:52] 71.96.73.191
[2007-10-01T01:02:29] 71.96.128.131
[2007-10-01T01:28:04] 71.96.177.129
[2007-10-01T01:30:45] 71.96.177.129
[2007-10-01T02:05:15] 71.96.177.129
[2007-10-01T02:09:19] 71.96.177.129
[2007-10-01T02:27:21] 71.96.177.129
[2007-10-01T02:32:34] 71.96.177.129
[2007-10-01T03:04:12] 71.96.177.129
[2007-10-01T03:09:11] 71.96.73.191
[2007-10-01T03:14:42] 71.96.73.191
[2007-10-01T03:25:15] 71.96.73.191
[2007-10-01T03:52:14] 71.96.0.29
[2007-10-01T04:42:55] 71.96.71.211
[2007-10-01T05:22:23] 71.96.71.211
[2007-10-01T06:43:38] 71.96.73.191
[2007-10-01T06:44:15] 71.96.73.191
[2007-10-01T06:48:05] 71.96.73.191
[2007-10-01T06:53:36] 71.96.134.101
[2007-10-01T07:22:32] 71.96.134.101
[2007-10-01T07:46:40] 71.96.73.191
[2007-10-01T08:02:18] 71.96.73.191

Hits per host:

Hits/IP Address
------------------
1 71.103.173.36
1 71.107.237.92
1 71.120.7.122
1 71.36.73.120
1 71.96.0.29
1 71.96.10.208
1 71.96.131.201
1 71.96.139.24
1 71.96.140.221
1 71.96.159.11
1 71.96.16.174
1 71.96.169.126
1 71.96.17.126
1 71.96.2.151
1 71.96.25.145
1 71.96.28.53
1 71.96.33.99
1 71.96.37.231
1 71.96.42.178
1 71.96.64.151
1 71.96.65.101
1 71.96.65.99
1 71.96.66.65
1 71.96.69.127
1 71.96.73.145
1 71.96.74.172
1 71.96.75.149
1 71.96.83.108
1 71.96.90.117
2 71.106.194.205
2 71.96.11.23
2 71.96.12.207
2 71.96.12.243
2 71.96.134.101
2 71.96.161.121
2 71.96.168.44
2 71.96.17.157
2 71.96.20.68
2 71.96.64.121
2 71.96.68.161
2 71.96.6.94
2 71.96.71.211
2 71.96.7.222
2 71.96.87.214
2 71.96.92.17
2 71.96.93.104
3 71.96.16.33
3 71.96.20.151
3 71.96.227.91
3 71.96.24.64
3 71.96.248.69
3 71.96.250.15
3 71.96.31.155
3 71.96.34.128
3 71.96.38.219
3 71.96.4.101
3 71.96.69.112
3 71.96.73.29
3 71.96.93.240
4 71.96.128.131
4 71.96.162.112
4 71.96.238.174
4 71.96.27.109
4 71.96.29.197
4 71.96.66.246
4 71.96.8.126
4 71.96.83.186
4 71.96.91.176
5 71.96.251.76
5 71.96.35.22
6 71.96.1.172
6 71.96.130.8
6 71.96.137.48
6 71.96.22.11
6 71.96.250.95
6 71.96.4.133
6 71.96.73.174
7 71.96.239.240
7 71.96.37.199
8 71.96.11.182
8 71.96.172.193
8 71.96.177.129
8 71.96.42.142
11 71.96.253.74
13 71.96.247.149
14 71.96.251.9
15 71.96.236.240
20 71.96.157.52
21 71.96.150.248
21 71.96.22.6
23 71.96.244.107
24 71.96.31.207
25 71.96.146.124
33 71.96.249.217
41 71.96.134.87
165 71.96.73.191

It is being replaced by direct.exe:

Date/Time Host
[2007-09-23T04:40:32] 71.76.52.64
[2007-09-23T07:45:25] 71.76.52.64
[2007-09-23T17:22:42] 71.118.1.44
[2007-09-23T17:50:15] 71.76.52.64
[2007-09-23T17:57:15] 71.118.1.44
[2007-09-23T20:03:42] 71.118.1.44
[2007-09-23T20:48:25] 71.76.52.64
[2007-09-23T20:51:09] 71.76.52.64
[2007-09-23T22:50:24] 71.76.52.64
[2007-09-23T23:43:48] 71.76.52.64
[2007-09-24T00:36:04] 71.76.52.64
[2007-09-24T03:29:46] 71.76.52.64
[2007-09-24T22:56:31] 71.12.23.204
[2007-09-24T23:10:26] 71.76.52.64
[2007-09-25T00:06:31] 71.76.52.64
[2007-09-25T00:16:12] 71.76.52.64
[2007-09-25T00:47:53] 71.76.52.64
[2007-09-25T02:19:33] 71.75.215.188
[2007-09-25T04:30:52] 71.76.52.64
[2007-09-25T05:23:08] 71.75.215.188
[2007-09-25T05:43:18] 71.75.215.188
[2007-09-25T09:06:29] 71.76.52.64
[2007-09-25T09:56:08] 71.75.215.188
[2007-09-25T10:28:26] 71.75.215.188
[2007-09-25T10:58:14] 71.76.52.64
[2007-09-25T13:44:15] 71.76.52.64
[2007-09-25T15:26:58] 71.75.215.188
[2007-09-25T15:43:36] 71.75.215.188
[2007-09-25T15:57:01] 71.75.215.188
[2007-09-25T17:13:22] 71.76.52.64
[2007-09-25T19:45:53] 71.76.52.64
[2007-09-25T21:08:57] 71.76.52.64
[2007-09-25T21:22:26] 71.76.52.64
[2007-09-26T03:20:00] 71.76.52.64
[2007-09-26T03:29:54] 71.75.215.188
[2007-09-26T03:44:16] 71.75.215.188
[2007-09-26T07:05:38] 71.76.52.64
[2007-09-26T07:42:19] 71.75.215.188
[2007-09-26T09:13:59] 71.76.52.64
[2007-09-26T09:36:06] 71.76.52.64
[2007-09-26T14:16:52] 71.122.28.184
[2007-09-26T15:45:38] 71.76.52.64
[2007-09-26T22:19:29] 71.76.52.64
[2007-09-27T01:02:00] 71.75.215.188
[2007-09-27T04:29:11] 71.75.215.188
[2007-09-27T05:06:04] 71.75.215.188
[2007-09-27T07:07:10] 71.75.215.188
[2007-09-27T10:07:02] 71.76.52.64
[2007-09-27T10:12:48] 71.75.215.188
[2007-09-27T11:15:29] 71.75.215.188
[2007-09-27T12:30:51] 71.76.52.64
[2007-09-27T16:46:56] 71.76.52.64
[2007-09-27T18:19:45] 71.76.52.64
[2007-09-27T19:00:22] 71.75.215.188
[2007-09-27T19:27:51] 71.76.52.64
[2007-09-27T19:57:26] 71.75.215.188
[2007-09-28T09:40:57] 71.75.215.188
[2007-09-28T13:09:31] 71.76.52.64
[2007-09-28T14:30:49] 71.76.52.64
[2007-09-28T15:24:15] 71.166.249.184
[2007-09-28T20:27:28] 71.166.249.184
[2007-09-28T23:07:36] 71.75.215.188
[2007-09-29T01:26:51] 71.166.249.184
[2007-09-29T02:21:38] 71.75.215.188
[2007-09-29T02:43:26] 71.166.249.184
[2007-09-29T04:48:55] 71.76.52.64
[2007-09-29T04:49:05] 71.118.48.197
[2007-09-29T08:54:49] 71.75.215.188
[2007-09-29T10:02:14] 71.166.249.184
[2007-09-29T10:23:54] 71.118.48.197
[2007-09-29T12:36:34] 71.75.215.188
[2007-09-29T12:47:17] 71.75.215.188
[2007-09-29T13:51:16] 71.166.249.184
[2007-09-29T14:01:01] 71.166.249.184
[2007-09-29T18:34:12] 71.75.215.188
[2007-09-29T19:04:13] 71.75.215.188
[2007-09-29T22:08:06] 71.75.215.188
[2007-09-29T23:28:45] 71.166.249.184
[2007-09-30T00:58:08] 71.75.215.188
[2007-09-30T01:19:02] 71.75.215.188
[2007-09-30T02:23:50] 71.118.48.197
[2007-09-30T02:48:36] 71.166.249.184
[2007-09-30T03:00:16] 71.166.249.184
[2007-09-30T04:59:03] 71.75.215.188
[2007-09-30T06:14:02] 71.171.222.254
[2007-09-30T06:44:02] 71.118.48.197
[2007-09-30T06:51:14] 71.166.249.184
[2007-09-30T06:53:42] 71.118.48.197
[2007-09-30T09:16:09] 71.171.222.254
[2007-09-30T09:20:20] 71.171.222.254
[2007-09-30T09:23:39] 71.171.222.254
[2007-09-30T09:34:09] 71.76.52.64
[2007-09-30T09:48:14] 71.171.222.254
[2007-09-30T09:52:46] 71.166.249.184
[2007-09-30T10:42:22] 71.171.222.254
[2007-09-30T11:13:58] 71.76.52.64
[2007-09-30T12:29:50] 71.171.222.254
[2007-09-30T12:35:17] 71.171.222.254
[2007-09-30T14:05:28] 71.75.215.188
[2007-09-30T14:41:23] 71.75.215.188
[2007-09-30T14:52:08] 71.166.249.184
[2007-09-30T15:18:45] 71.76.52.64
[2007-09-30T15:39:32] 71.118.48.197
[2007-09-30T16:06:58] 71.166.249.184
[2007-09-30T16:22:06] 71.75.215.188
[2007-09-30T17:30:39] 71.75.215.188
[2007-09-30T17:36:17] 71.166.249.184
[2007-09-30T17:45:48] 71.166.249.184
[2007-09-30T18:17:09] 71.166.249.184
[2007-09-30T18:25:35] 71.166.249.184
[2007-09-30T20:27:40] 71.166.249.184
[2007-09-30T21:39:34] 71.75.215.188
[2007-09-30T21:47:25] 71.75.215.188
[2007-09-30T22:35:49] 71.75.215.188
[2007-09-30T22:43:55] 71.118.48.197
[2007-09-30T22:51:46] 71.118.48.197
[2007-10-01T00:00:37] 71.75.215.188
[2007-10-01T00:18:03] 71.118.48.197
[2007-10-01T00:22:06] 71.75.215.188
[2007-10-01T00:25:38] 71.75.215.188
[2007-10-01T00:46:15] 71.12.18.247
[2007-10-01T00:46:48] 71.118.48.197
[2007-10-01T01:00:11] 71.118.48.197
[2007-10-01T01:18:27] 71.166.249.184
[2007-10-01T01:35:20] 71.118.48.197
[2007-10-01T02:17:40] 71.12.18.247
[2007-10-01T03:35:20] 71.12.18.247
[2007-10-01T04:01:04] 71.166.249.184
[2007-10-01T05:29:32] 71.118.48.197
[2007-10-01T05:49:46] 71.118.48.197
[2007-10-01T06:48:09] 71.118.48.197
[2007-10-01T07:10:23] 71.12.18.247
[2007-10-01T07:13:05] 71.76.52.64
[2007-10-01T07:19:02] 71.118.48.197

Hits per host:

Hits/IP Address
------------------
1 71.122.28.184
1 71.12.23.204
3 71.118.1.44
4 71.12.18.247
8 71.171.222.254
17 71.118.48.197
21 71.166.249.184
39 71.76.52.64
41 71.75.215.188

Virustotal.com results:

File 0b85ba2753444a912e7a04b7fa326d06 received on 10.01.2007 09:24:33 (CET)
Result: 22/32 (68.75%)

Antivirus Version Last Update Result
AhnLab-V3 2007.10.1.0 2007.10.01 -
AntiVir 7.6.0.18 2007.10.01 TR/PCK.CPEX-based.F.46
Authentium 4.93.8 2007.10.01 -
Avast 4.7.1043.0 2007.09.30 Win32:Rizo-E
AVG 7.5.0.488 2007.10.01 IRC/BackDoor.SdBot3.SIS
BitDefender 7.2 2007.10.01 Backdoor.Rizo.A
CAT-QuickHeal 9.00 2007.09.29 Trojan.CPEX-based.f
ClamAV 0.91.2 2007.10.01 -
DrWeb 4.33 2007.09.30 Trojan.Inject.251
eSafe 7.0.15.0 2007.09.30 Win32.CPEX-based.f
eTrust-Vet 31.2.5174 2007.09.30 -
Ewido 4.0 2007.09.30 -
FileAdvisor 1 2007.10.01 -
Fortinet 3.11.0.0 2007.10.01 W32/CPEX_based.F!worm
F-Prot 4.3.2.48 2007.10.01 -
F-Secure 6.70.13030.0 2007.10.01 Packed.Win32.CPEX-based.f
Ikarus T3.1.1.12 2007.10.01 Trojan-PWS.Win32.LdPinch.bjx
Kaspersky 7.0.0.125 2007.10.01 Packed.Win32.CPEX-based.f
McAfee 5130 2007.09.28 W32/Sdbot.worm.gen.as
Microsoft 1.2803 2007.10.01 Trojan:Win32/Ircbrute!850B
NOD32v2 2561 2007.10.01 a variant of Win32/Rbot
Norman 5.80.02 2007.09.28 W32/Malware.AUNP
Panda 9.0.0.4 2007.10.01 W32/Sdbot.LEP.worm
Prevx1 V2 2007.10.01 Heuristic:Suspicious Backdoor
Rising 19.43.00.00 2007.10.01 Trojan.Win32.Crypt.exf
Sophos 4.22.0 2007.10.01 -
Sunbelt 2.2.907.0 2007.10.01 Backdoor.Rizo.A
Symantec 10 2007.10.01 -
TheHacker 6.2.6.075 2007.10.01 Trojan/CPEX-based.f
VBA32 3.12.2.4 2007.10.01 Trojan-PSW.Win32.OnLineGames.bs
VirusBuster 4.3.26:9 2007.09.30 -
Webwasher-Gateway 6.0.1 2007.10.01 Trojan.PCK.CPEX-based.F.46

Additional information
File size: 132096 bytes
MD5: 0b85ba2753444a912e7a04b7fa326d06
SHA1: ab7e58e737cdff4413b5c77d1e3dbd47669681c6
packers: PECompact
packers: PecBundle, PECompact
packers: PE_Patch.PECompact, PecBundle, PECompact

As you can see, they are essentially the same worm/virus from the virustotal results. The virus's code has been subtly altered to change the name of the Windows file the worm executes and propagates as and evades the Symantec Antivirus program (can spread via Symantec AV as well). Passive AV scanners are having more and more difficulty keeping up with the worm writers because they have to keep hitting a moving target. This IRCbot is old technology as well. IRCbots are being phased out and replaced with bots like the Storm worm which are much, much harder to neutralize. Unfortunately, old Internet malware is good enough for running on verizon.net.

Labels: worm analysis malware trends