value.strangled.net

email=Mummy nick=Mummy[XP]95357 anick=[XP-1069692] host=value.strangled.netSERVER:value.strangled.net:6667 chanel #heba IP of : 147.102.159.9 host value.strangled.net inetnum: 147.102.0.0 – 147.102.255.255 netname: NTUA descr: National Technical University of Athens country: GR admin-c: NN4-RIPE tech-c: NN4-RIPE mnt-by: NTUA-NOC status: EARLY-REGISTRATION source: RIPE # Filtered role: NTUA NOC address: Network Operation Center – NOC address: National Technical University Of Athens – NTUA

91.121.13.139

Remote Host Port Number 91.121.13.139 9595 NICK USA|XP|SP2|00|3000|L|3247 USER aovx 0 0 :USA|XP|SP2|00|3000|L|3247 JOIN ##nzm1 psy USERHOST USA|XP|SP2|00|3000|L|3247 MODE USA|XP|SP2|00|3000|L|3247 +iB-x JOIN ##nzm-lan psy Topic is ‘@advscan mssql 60 6 0 -b -l’ Set by TaUr on Fri Jul 16 14:17:43 * The following port was open in the system: Port Protocol Process 1053 TCP

64.202.102.11

Remote Host Port Number 204.0.5.34 80 204.0.5.41 80 204.0.5.42 80 204.0.5.51 80 204.0.5.56 80 204.0.5.58 80 216.178.38.168 80 63.135.80.58 80 63.135.86.30 80 63.135.86.39 80 64.202.102.11 1234 PASS xxx MODE NEW-[USA|00|P|72247] -ix JOIN #!nn! test NICK NEW-[USA|00|P|72247] USER XP-0778 * 0 :COMPUTERNAME PONG irc.priv8net.com Now talking in #!nn! Topic On: [ #!nn! ] [.m.s|.m.n You Photo

91.121.96.150

Remote Host Port Number 91.121.96.150 51987 NICK pLagUe{USA}07719 JOIN #trees MODE pLagUe{USA}07719 -ix USER SkuZ * ok TeaM UniX b0at 0.4 PONG 33AF95EA PRIVMSG #trees : New PC Infected. Other details * The following port was open in the system: Port Protocol Process 1052 TCP raidhost.exe (%Windir%raidhost.exe) Registry Modifications * The newly created Registry Value

75.102.36.13

Remote Host Port Number 195.122.131.10 80 204.0.5.41 80 204.0.5.51 80 204.0.5.58 80 204.0.5.59 80 207.38.101.12 80 208.43.36.96 80 216.178.38.168 80 63.135.80.46 80 63.135.80.58 80 75.102.36.13 2345 PASS xxx NICK NEW-[USA|00|P|00029] USER XP-4625 * 0 :COMPUTERNAME MODE NEW-[USA|00|P|00029] -ix JOIN #!gf! test PONG 22 MOTD * The data identified by the following URLs was then requested

server1.beetrootmusic.com

66.225.241.182:2345 Nick: NEW-[AUT|00|P|96042] Username: XP-2560 Server Pass: xxx Joined Channel: #!gf! with Password test Channel Topic for Channel #!gf!: “D http://ow.ly/2c4Kd?=www.facebook.com/photo.php?=”

0delphi1.no-ip.info

Remote Host Port Number 82.146.48.13 6668 85.214.132.85 80 * The data identified by the following URL was then requested from the remote web server: o http://www.fahrschule-abrolath.de/Project2.exe NICK [UNI][XP]-55691 USER NetBot “” no-ip.info :v1.2 by deLphi JOIN #back2roots luvya JOIN #UseNeXT PONG :irc.priv8net.com Registry Modifications * The newly created Registry Values are: o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] + Microsoft

cd.faIIdovvn.info

cd.faIIdovvn.info 6764 chanel=#balengor =BzeaTm1/bEnUFvSpixrHlk+86cpPnSiZjrN0q9we

220.229.232.69

Remote Host Port Number 220.229.232.69 8878 USER hdwjubxd hdwjubxd hdwjubxd :nianskwq NICK FPjVxcasd MODE FPjVxcasd +xi JOIN #maxi USERHOST FPjVxcasd MODE #maxi +smntu

205.234.138.152

Remote Host Port Number 204.0.5.41 80 204.0.5.42 80 204.0.5.51 80 204.0.5.57 80 204.0.5.58 80 204.0.5.59 80 216.178.38.168 80 63.135.80.58 80 63.135.86.37 80 63.135.86.39 80 205.234.138.152 2345 PASS xxx NICK NEW-[USA|00|P|84708] USER XP-1884 * 0 :COMPUTERNAME MODE NEW-[USA|00|P|84708] -ix JOIN #!gf! test PONG 22 MOTD * The data identified by the following URLs was then requested