i.trizztal.info(ngrBot hosted in Russian Federation Moscow Oao Webalta)

i.trizztal.info 92.241.165.133

Remote Host Port Number
199.15.234.7 80
92.241.165.133 1863 PASS ngrBot

NICK n{US|XPa}hozcoie
USER hozcoie 0 0 :hozcoie

Now talking in #start
Topic On: [ #start ] [ *mdns http://policlinicodelsur.com/ostia.txt *msn.int # *msn.set jajajajajajajajajjajajaja viste esto? lol http://bit.ly/qZLzx8?/############/******/animacion ]
Topic By: [ z3r0fr3ak ]

files used to spread malware:
http://adf.ly/3CnwR

UPDATE:
Remote Host Port Number
190.208.17.139 80

199.15.234.7 80

92.241.165.133 8586 PASS ngrBot

The data identified by the following URLs was then requested from the remote web server:
http://www.ctuss2011.cl/cache/join.exe
http://www.ctuss2011.cl/cache/uiui.txt

hosting infos:
http://whois.domaintools.com/92.241.165.133

Categories: Uncategorized