Part 9: Interserver, malware, and the Scottish weather

I love predictability, makes my job much easier (well, as far as these chaps are concerned anyway). 3 IPs as of today, same registrars (surprise surprise);

UK2
DirectI
NetEarth

One of the IPs is the same as yesterday (errr Burst.net/HostNOC - what happened to your 24 hour warning?).

66.197.187.152 immovable.detectstakes.com AS21788 66.197.128.0/17 NOC - Network Operations Center Inc.
193.105.171.120 120-171-105-193.coolvds.com AS50669 193.105.171.0/24 COOLVDS-AS FOP Kutcevol Maksum Mukolaevich
184.22.251.238 184-22-251-238.static.hostnoc.net AS21788 184.22.224.0/19 NOC - Network Operations Center Inc.

URLs:

storagemovie-online.biz/New-Video-Addon.40028.exe
mediatoolparts.net/New-Video-Addon.40028.exe
mediamoreplugins.info/New-Video-Addon.40028.exe
starmovie-plus.com/New-Video-Addon.40028.exe
moviefreeboard.com/New-Video-Addon.40028.exe
mediawidgetparts.net/New-Video-Addon.40028.exe

MD5s:

03217a37d568effa050e6653c518bb34
e4eccc4c9be9df26ae55aa531c84cde0
76a24f1f47a52eef618f4ea0b6c50983
86644ff516d5956b5095ce742343e76a
d8d2c09a82d355a6708e304bab999f35
b31c886cf00c075d2c5e3f204f8d6edd

References

Part 8: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/07/part-7-interserver-malware-and-scottish_18.html

Part 7: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/07/part-7-interserver-malware-and-scottish.html

Part 6: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/07/part-6-interserver-malware-and-scottish.html

Part 5a: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/06/part-5-interserver-malware-and-scottish_28.html

Part 5: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/06/part-5-interserver-malware-and-scottish.html

Part 4: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/06/part-4-interserver-malware-and-scottish.html

Part 3: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/06/part-3-interserver-malware-and-scottish.html

Part 2: Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/06/part-2-interserver-malware-and-scottish.html

Interserver, malware, and the Scottish weather
http://hphosts.blogspot.com/2011/06/interserver-malware-and-scottish.html