Remote Host Port Number
winudpmgr.mydyn.net 8080
NICK [XP]|239064039
USER bvuucwlfl 0 0 :[XP]|239064039
USERHOST [XP]|239064039
MODE [XP]|239064039 -xi+B
JOIN #ddosbot
NICK [XP]|756551194
USER jvecgoeyl 0 0 :[XP]|756551194
USERHOST [XP]|756551194
MODE [XP]|756551194 -xi+B
NICK [XP]|617625980
USER hojfuelqopx 0 0 :[XP]|617625980
USERHOST [XP]|617625980
MODE [XP]|617625980 -xi+B
Registry Modifications
* The following Registry Keys were created:
o HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices
o HKEY_CURRENT_USERSoftwareMicrosoftOLE
* The newly created Registry Values are:
o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
+ Microsoft Update = “vgrgfupdt”
so that vgrgfupdt runs every time Windows starts
o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices]
+ Microsoft Update = “vgrgfupdt”
so that vgrgfupdt runs every time Windows starts
o [HKEY_CURRENT_USERSoftwareMicrosoftOLE]
+ Microsoft Update = “vgrgfupdt”
* The following Registry Values were modified:
o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftOle]
+ EnableDCOM =
o [HKEY_LOCAL_MACHINESYSTEMControlSet001ControlLsa]
+ restrictanonymous =
o [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa]
+ restrictanonymous =