Remote Host Port Number
199.101.133.30 80
199.15.234.7 80
70.38.98.238 80
216.172.132.132 1888 PASS ngrBot
* The data identified by the following URLs was then requested from the remote web server:
o http://dc360.4shared.com/download/A9fXfDif/gdfsdsfd534.exe
o http://api.wipmania.com/
o http://img104.herosh.com/2011/10/05/270463603.gif
PRIVMSG #XP :[d=”http://dc360.4shared.com/download/A9fXfDif/gdfsdsfd534.exe” s=”167936 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataLdxaxl.exe” – Download retries: 0
PRIVMSG #XP :[d=”http://img104.herosh.com/2011/10/05/270463603.gif” s=”81920 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.exe” – Download retries: 0
NICK n{US|XPa}mjzdabb
USER mjzdabb 0 0 :mjzdabb
JOIN ##center 1963.g3rb3rs1t0.3691
JOIN #XP
JOIN #US