Another domain is being used to host the latest version of the Storm Worm. Millions of emails were spammed out from unsuspecting PC users enticing users to download the malware and rootkit.
If a user clicks on the link they will be shown a page like this,
If they click on the link a file called happynewyear2008.exe will be downloaded.
At this moment in time only 9 out of 32 scanners used by Virustotal can detect the current file as malware.
Here is the whois details for familypostcards2008.com with a hint of humor – registered by Larry Claus…
 Domain name:            FAMILYPOSTCARDS2008.COM
 Name Server:            ns.familypostcards2008.com 66.215.91.63
 Name Server:            ns10.familypostcards2008.com 76.112.151.191
 Name Server:            ns11.familypostcards2008.com 76.107.40.165
 Name Server:            ns12.familypostcards2008.com 193.77.249.129
 Name Server:            ns13.familypostcards2008.com 77.202.25.169
 Name Server:            ns2.familypostcards2008.com 24.210.99.223
 Name Server:            ns3.familypostcards2008.com 66.159.176.149
 Name Server:            ns4.familypostcards2008.com 67.163.236.85
 Name Server:            ns5.familypostcards2008.com 98.196.175.5
 Name Server:            ns6.familypostcards2008.com 71.200.65.128
 Name Server:            ns7.familypostcards2008.com 71.12.160.177
 Name Server:            ns8.familypostcards2008.com 72.134.39.155
 Name Server:            ns9.familypostcards2008.com 98.226.9.190
 Creation Date:          2007.12.29
 Updated Date:           2007.12.29
 Expiration Date:        2007.12.29
 Status:                 DELEGATED
 Registrant ID:          X05O1TC-RU
 Registrant Name:        Larry Claus
 Registrant Organization: Larry Claus
 Registrant Street1:     1874 str. office 923
 Registrant City:        Los-Angeles
 Registrant State:       CA
 Registrant Postal Code: 320784
 Registrant Country:     US
 Administrative Technical Contact
 Contact ID:             X05O1TC-RU
 Contact Name:           Larry Claus
 Contact Organization:   Larry Claus
 Contact Street1:        1874 str. office 923
 Contact City:           Los-Angeles
 Contact State:          CA
 Contact Postal Code:    320784
 Contact Country:        US
 Contact Phone:          1 320 5216723
 Contact E-mail:         larryknower931@yahoo.com
 Registrar:              ANO Regional Network Information Center dba RU-CENTER
 Last updated on 2007.12.30 02: 15: 52 MSK/MSD
We will keep you posted as new Storm Worm domains appear.
Keep Safe,
regards
Steo – www.antirootkit.com
Microsoft have just gained one of the best anti rootkit teams on the planet. EP_X0FF and the development team of Rootkit Unhooker have joined Microsoft. They are currently making plans to ship off to Wittenberg in Germany ( where Martin Luther is buried ) where the Rootkit Unhooker team will finish off work on their, up to now,secret project called Secured Eye (SEye),“…in a two words this is project mix of software/hardware related to distributed calculations and virtualization technologies based on Vanderpool / Pacifica extensions. Not a Blue Pill. To be more correct some parts of SEye can be used as a pill for any kind of Blue Pill variations 
” 
Microsoft now owns Rootkit Unhooker and SEye….”As you can guess all our source code and concept were sold to MS. This was happened in the beginning of November and includes all variants of our test programs, RkU, including last 4.1 version and SEye which is ready on 3/4.”
“Significantly, although rootkits were detected on 15.6 percent of PCs during October 2007, that figure had risen to 22 percent by early December.”