Remote Host Port Number
141.105.66.208 7654 PASS ngrBot
174.120.234.158 80
199.15.234.7 80
204.124.180.228 80
The data identified by the following URLs was then requested from the remote web server:
http://panvalle.com/images/heater.pub.exe
http://api.wipmania.com/
http://www.pompeya.gob.ec/includes/router.txt
PRIVMSG #oldgold :[DNS]: Blocked 0 domain(s) – Redirected 49 domain(s)
NICK n{US|XPa}buiwlhq
USER buiwlhq 0 0 :buiwlhq
JOIN #oldgold noKIDs
JOIN #US
PRIVMSG #oldgold :[d=”http://panvalle.com/images/heater.pub.exe” s=”167936 bytes”] Updated bot file “C:Documents and SettingsUserNameApplication DataWcxaxw.exe” – Download retries: 0
hosting infos:
http://whois.domaintools.com/141.105.66.208