* To mark the presence in the system, the following Mutex object was created:
o Tr0gBot
* The following ports were open in the system:
Port Protocol Process
113 TCP izsojy.exe (%System%izsojy.exe)
1073 TCP izsojy.exe (%System%izsojy.exe)
1074 TCP ftylsv.exe (%System%ftylsv.exe)
1075 TCP izsojy.exe (%System%izsojy.exe)
1076 TCP izsojy.exe (%System%izsojy.exe)
PASS 073824050
NICK n-635564
USER kejcfs 0 0 :n-635564
USERHOST n-635564
MODE n-635564 -x+B
JOIN #sexhot 073824050
NOTICE n-635564 :.VERSION mIRC v6.12 Khaled Mardam-Bey.
PRIVMSG #sexhot :[MAIN]: Status: Ready. Bot Uptime: 0d 0h 0m.
PRIVMSG #sexhot :[MAIN]: Bot ID: Tr0gBot.
PRIVMSG #sexhot :[Scn]: Exploit Statistics: NetBios: 0, NTPass: 0, Dcom135: 0, Dcom1025: 0, Dcom2: 0, MSSQL: 0, lsass: 0, Total: 0 in 0d 0h 0m.
PRIVMSG #sexhot :[MAIN]: Uptime: 0d 0h 1m.
PRIVMSG #sexhot :[PROC]: Failed to terminate process: PROCESS_NAME_TO_TERMINATE
PRIVMSG #sexhot :[HTTPD]: Server listening on IP: 127.0.0.1:81, Directory: .
PRIVMSG #sexhot :[DDoS]: Flooding: (127.0.0.2:1234) for 50 seconds.
PRIVMSG #sexhot :[DDoS]: Done with flood (0KB/sec).
PRIVMSG #sexhot :[SYN]: Done with flood (0KB/sec).
PRIVMSG #sexhot :[SYN]: Flooding: (127.0.0.2:1234) for 50 seconds.
PRIVMSG #sexhot :[SCAN]: Random Port Scan started on 127.0.x.x:445 with a delay of 5 seconds for 0 minutes using 10 threads.
PRIVMSG #sexhot :[SCAN]: Random Port Scan started on 127.0.x.x:139 with a delay of 5 seconds for 0 minutes using 10 threads.
PRIVMSG #sexhot :[SCAN]: Failed to start scan, port is invalid.
PRIVMSG #sexhot :[SCAN]: Random Port Scan started on 127.0.x.x:135 with a delay of 5 seconds for 0 minutes using 10 threads.
NICK n-598777
USER pprzpp 0 0 :n-598777
USERHOST n-598777
MODE n-598777 -x+B
NICK n-966025
USER eemwlizx 0 0 :n-966025
USERHOST n-966025
MODE n-966025 -x+B
USER atzthj 0 0 :n-966025
NICK n-074948
USER seysyvzu 0 0 :n-074948
USERHOST n-074948
MODE n-074948 -x+B
Resolved : [irc.sexnet.org] To [216.82.127.45]
Resolved : [irc.sexnet.org] To [216.82.127.46]
Resolved : [irc.sexnet.org] To [174.34.187.36]
irc.sexnet.org:6667