[Dshield] 4257 is messenger spam

TRushing@hollandco.com TRushing at hollandco.com
Thu Jan 5 19:58:04 GMT 2006


I started tcpdump and got the following for a batch of 4257 hits:

BEGIN:

Your Windows registry is corrupted and needs to be cleaned immediately.


Compromised registry files can lead to the following:

1. Complete access of your PC by hackers
2. Slow speeds resulting in slow downloads of internet files
3. The compromise of personal information stored on your computer
4. Complete system failure resulting in the need for a complete reinstall 
of your hard drive.

To fix this problem:

1. Open Internet Explorer
2. In the URL field type -  www.RegUpdate.net
3. Note that all versions of windows are supported.
4. Once you load the program, close this window.

Please note that once you visit  www.RegUpdate.net  and install and fix 
your PC 
with the program you will not receive any more reminders or pop-ups like 
this one.

END

Whois shows a 17 Nov 2005 registration date, which would be consistent 
with the 4257 spike:

whois regupdate.net
[Querying whois.internic.net]
[Redirected to whois.enom.com]
[Querying whois.enom.com]
[whois.enom.com]

Registration Service Provided By: NameCheap.com
Contact: support at NameCheap.com
Visit: http://www.namecheap.com/
 
Domain name: regupdate.net

Registrant Contact:
   cybert
   cybert hans (shrhostbiz at yahoo.com)
   +1.008607231245564
   Fax: +1.008607231245564
   No.267 Gangming road
   No.267 Gangming road
   Beihai, GU 345600
   MO

Administrative Contact:
   cybert
   cybert hans (shrhostbiz at yahoo.com)
   +1.008607231245564
   Fax: +1.008607231245564
   No.267 Gangming road
   No.267 Gangming road
   Beihai, GU 345600
   MO

Technical Contact:
   cybert
   cybert hans (shrhostbiz at yahoo.com)
   +1.008607231245564
   Fax: +1.008607231245564
   No.267 Gangming road
   No.267 Gangming road
   Beihai, GU 345600
   MO

Status: Locked

Name Servers:
   dns1.name-services.com
   dns2.name-services.com
   dns3.name-services.com
   dns4.name-services.com
   dns5.name-services.com
 
Creation date: 17 Nov 2005 15:51:03
Expiration date: 17 Nov 2006 15:51:03


More information about the list mailing list