Author: Pig

server95527.santrex.net(botnet hosted in Germany Berlin Netdirekt E.k)

Uncategorized

Remote Host Port Number 212.95.32.241 6667 NICK {XPUSA900275} MODE {XPUSA900275} -ix JOIN ##spam## PONG irc.priv8net.com USER COMPUTERNAME * 0 :COMPUTERNAME NICK {XPUSA60072} Now talking in ##security-check## Topic On: [ ##security-check## ] [ .part ##security-check## ] Topic By: [ Z-3R0 ] infos about hosting: http://whois.domaintools.com/212.95.32.241

nokia2mon2.markaz-royal.net(shellbooter hosted in Saudi Arabia Riyadh Dsl Home Subscribers_dynamic Ips)

Uncategorized

Remote Host Port Number 77.30.55.134 3086 Other details * The following port was open in the system: Port Protocol Process 1051 TCP svchost.exe (%AppData%Microsoftsvchost.exe) Registry Modifications * The following Registry Key was created: o HKEY_CURRENT_USERSoftwareeeptfs2 * The newly created Registry Values are: o [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun] + Startup = “%AppData%Microsoftsvchost.exe” so that svchost.exe runs every time WindowsRead more...

websiteex.com(botnet hosted in United States Chicago Hostforweb Inc)

Uncategorized

Remote Host Port Number 174.37.200.82 80 63.135.80.224 80 63.135.80.46 80 66.220.147.11 80 96.17.164.187 80 64.202.102.10 1234 PASS xxx MODE NEW-[USA|00|P|42884] -ix JOIN #!nn! test PONG 22 MOTD NICK NEW-[USA|00|P|42884] USER XP-9086 * 0 :COMPUTERNAME infos about hosting: http://whois.domaintools.com/64.202.102.10

cancanmt2.no-ip.biz(RAT hosted in Turkey Antalya Tt Adsl-ttnet-ulus-static)

Uncategorized

cancanmt2.no-ip.biz: type A, class IN, addr 95.9.90.39 Dest Port:100 Summary Creates temporary files Queries a list of all running processes Performs DNS lookups Enables debug privileges Creates files inside the system directory Loads the internet automation component (ieframe.dll) Creates an autostart registry key Checks for debuggers (Devices) Creates a thread in another existing process (threadRead more...