85.17.138.130

Remote Host Port Number
192.168.88.2 80

85.17.138.130 81

NICK xx[USA|XP]5722214
PONG :index.html
USER oo oo oo :bb
JOIN #.ooo

Registry Modifications

The following Registry Keys were created:
HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_MACROVISIONS
HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_MACROVISIONS000
HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesMacrovisions
HKEY_CURRENT_USERSoftwareMacrovisions
The newly created Registry Values are:
[HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_MACROVISIONS000]
Service = “Macrovisions”
Legacy = 0x00000001
ConfigFlags = 0x00000000
Class = “LegacyDriver”
ClassGUID = “{8ECC055D-047F-11D1-A537-0000F8753ED1}”
DeviceDesc = “Macrovisions”
[HKEY_LOCAL_MACHINESYSTEMControlSet001EnumRootLEGACY_MACROVISIONS]
NextInstance = 0x00000001
[HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesMacrovisions]
DisplayName = “Macrovisions”
ImagePath = “??%Temp%71863.sys”
Type = 0x00000001
Start = 0x00000003

Memory Modifications

There was a new process created in the system:
Process Name Process Filename Main Module Size
system.exe %System%system.exe 81.920 bytes

Now talking in #.ooo
Topic On: [ #.ooo ] [ %%,mEuuS59Lb1tLZFtLoaBLs7Ozsw==,%% ]
Topic By: [ s ] maybe SnK that russian lamer

Categories: Uncategorized