Thanks to anonymous guy here for the sample wich u can download here:hxxp://sharesend.com/ola3pkmx
for finding this botnet
Resolved : [serv16.3sli.us] To [109.163.233.44]
109.163.233.44:8939
Nick: n{US|XPa}uufzjxq
Username: uufzjxq
Server Pass: new
Joined Channel: ##new with Password new
Channel Topic for Channel ##new: “&mod usbi on &mod pdef on &mdns hxxp://109.163.233.44/dns.txt”
hosting infos:
Anonymous - February 7, 2013 at 5:38 am
109.163.233.44 seems like this guy is still in bushiness but with a different port number: 4040
Pig - February 7, 2013 at 4:46 pm
thank you for infos 🙂