2007-12-25 10:36:00 by
Russ McRee in
HolisticInfoSec.org
...Christmas, the RBN would like to wish you a Happy New Year as well with hxxp://uhavepostcard.com/happy2008.exe
New hash, 5bb3606d36019142507043f30401c5d2, same malware as that we received when we fell for the Christmas strip show they offered us
Again, it copies itself to C:WINDOWS as disnisa.exe, writes the same registry keys and config...