Just doing my normal reading trying to stay updated in this ever changing field... and it appears as though our favorite spyware/malware coolwebsearch has changed hosting providers!
Might as well block them at your firewall, just to be sure.
Story @ http://www.incidents.org/diary.php?storyid=1245
You can also add these domain names to your blackhole dns until they get updates out.
(Not sure if they've updated yet because I can't get to bleedingsnort.com! )