DNS Lookup Host Name IP Address 0 127.0.0.1 core3019.aquashoolonline.com core3019.aquashoolonline.com 66.197.155.197 UDP Connections Remote IP Address: 127.0.0.1 Port: 1070 Send Datagram: 542 packet(s) of size 1 Recv Datagram: 542 packet(s) of size 1 Download URLs http://66.197.155.197/stat/action3.cgi?p=1&a=3019&system=7.0.5730|5.1.3|1031&id=A590474043D749CFCDB2 (core3019.aquashoolonline.com) http://66.197.155.197/stget2.cgi?host=host&id=3019 (core3019.aquashoolonline.com) Outgoing connection to remote server: core3019.aquashoolonline.com TCP port 80 Outgoing connection to remote server: core3019.aquashoolonline.com TCPRead more...
bbb.the88888.com
DNS Lookup Host Name IP Address 0 127.0.0.1 bbb.the88888.com tj19.x9wdns.com tj19.x9wdns.com 121.14.156.129 bbb.the88888.com 222.186.38.175 xxx.free88888.com xxx.free88888.com 60.190.90.107 UDP Connections Remote IP Address: 127.0.0.1 Port: 1118 Send Datagram: 100 packet(s) of size 1 Recv Datagram: 100 packet(s) of size 1 Download URLs http://121.14.156.129/bang1/tj.asp?mac=00c0f185907a&ver=10728&os=&dtime=2010-7-2 (tj19.x9wdns.com) http://222.186.38.175/c/host.txt (bbb.the88888.com) http://222.186.38.175/c/ff.txt (bbb.the88888.com) http://60.190.90.107/C01.exe (xxx.free88888.com) http://60.190.90.107/C10.exe (xxx.free88888.com) http://60.190.90.107/C/C02.exe (xxx.free88888.com) http://60.190.90.107/C/C03.exe (xxx.free88888.com)Read more...
codienviet.com(autoit bot)
codienviet.com codienviet.com 74.50.13.8 irc.abjects.net 74.3.165.66 Download URLs http://74.50.13.8/bot/data.php (codienviet.com) Outgoing connection to remote server: codienviet.com TCP port 80 C&C Server: 74.3.165.66:6667 Server Password: Username: XYZ-AEMPILWXUC Nickname: XYZ-AEMPILWXUC Channel: #xyz (Password: 3939) Channeltopic: :_CHAR(0x02)__CHAR(0x03)_0,8|_CHAR(0x03)_7,8|_CHAR(0x03)_8,7|_CHAR(0x03)_4,7|_CHAR(0x03)_7,4|_CHAR(0x03)_5,4|_CHAR(0x03)_4,5|_CHAR(0x03)_1,5|_CHAR(0x03)_5,1| _CHAR(0x03)_9,1Welcome to mylove channel #XYZ…. enjoy and fun….. keep your smile…._CHAR(0x03)_5,1 |_CHAR(0x03)_1,5|_CHAR(0x03)_4,5|_CHAR(0x03)_5,4|_CHAR(0x03)_7,4|_CHAR(0x03)_4,7|_CHAR(0x03)_8,7|_CHAR(0x0F)_ Registry Changes by all processes Create or Open Changes HKEY_CURRENT_USERSoftwarePoliciesMicrosoftInternetRead more...
26 mb exe files from diferent malvares
Here around 26 mb exe files collected by me inside the folder u can find diferent malvares like keylogers,rats,botnets etc take a look ate the picture : Download: http://4c93d453.uberpicz.com
cx10man.weedns.com(Mouse’s big net)
This is Mouse’s Hub lol cx10man.weedns.com:3305 secretpass JOIN #mm RSA Now talking in #mm Topic On: [ #mm ] [ +RFK1S/6KRjv0TkGzf1/9DgN/v9Xc4.xLe8L1bni40/nobx.1Yk9c/0huyUx0jw3NQ.1MD7F.yzT88.Nkc9c1EdFzy/8M3IL1fpZib.aEu1R.F7Xil0nzHEC.zO2Ji.qiFiN1fB5yg.4LavN/r5ZOu1p7Mhb.Rvv8x.Adm9j0 ] Modes On: [ #mm ] [ +smntMuk RSA ] Resolved : [cx10man.weedns.com] To [210.166.223.51] Resolved : [cx10man.weedns.com] To [210.127.253.90] Resolved : [cx10man.weedns.com] To [62.193.249.122] Resolved : [cx10man.weedns.com] To [80.247.72.130] Resolved : [cx10man.weedns.com] ToRead more...
xx.sqlteam.info
DNS Network Activity name result type proxim.ntkrnlpa.info 83.68.16.30 DNS_TYPE_A xx.sqlteam.info 83.68.16.6 DNS_TYPE_A xx.nadnadzz.info 67.43.236.67 DNS_TYPE_A idfc.info 67.215.1.206 DNS_TYPE_A IRC Network Activity server ip server port server pass nick username channel channel pass 83.68.16.6 67.43.236.67 5190 10324 (none) (none) lNwsjwZq lNwsjwZq qwyozt qwyozt #las6 #las6 (null) (null) HTTP Network Activity result port name request 67.215.1.206 80Read more...
65ml.hopto.org(ENO_ albanian noob)
65ml.hopto.org 88.191.67.99 Opened listening TCP connection on port: 113 C&C Server: 88.191.67.99:7000 Server Password: Username: njkkikv Nickname: ermgtg Channel: ##PB## (Password: ) Channeltopic: :.asc asn445 100 5 0 -r -b -s Registry Changes by all processes Create or Open Changes HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun “Windows Service Agent” = iexplorer.exe HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServices “Windows Service Agent” = iexplorer.exe HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun “Windows ServiceRead more...
69.28.220.143
Remote Host Port Number 208.43.36.96 80 216.178.38.168 80 64.208.241.27 80 64.208.241.41 80 74.125.65.157 80 74.125.65.166 80 69.28.220.143 1234 PASS xxx MODE NEW-[USA|00|P|54399] -ix JOIN #!nn! test NICK NEW-[USA|00|P|54399] USER XP-0226 * 0 :COMPUTERNAME Invisible Users: 1 Operators: 1 operator(s) online Channels: 7 channels formed Clients: I have 2139 clients and 0 servers Local users: CurrentRead more...
62.193.249.122
Remote Host Port Number 62.193.249.122 3305 PASS secretpass NICK P|o3oa5ta1x USER ehfz0uzst * 0 :USA|XP|080 USERHOST P|o3oa5ta1x MODE P|o3oa5ta1x JOIN #mm RSA Other details * The following ports were open in the system: Port Protocol Process 69 UDP unwise_.exe (%FontsDir%unwise_.exe) 1055 TCP unwise_.exe (%FontsDir%unwise_.exe) 28889 TCP unwise_.exe (%FontsDir%unwise_.exe) Registry Modifications * The following Registry KeysRead more...
212.25.51.125(industrial-ip125.networx-bg.com)
Remote Host Port Number 204.0.5.41 80 204.0.5.51 80 208.43.36.96 80 216.178.38.168 80 74.125.65.155 80 74.125.65.165 80 212.25.51.125 2345 PASS xxx MODE NEW-[USA|00|P|59898] -ix JOIN #!gf! test PONG 22 MOTD NICK NEW-[USA|00|P|59898] USER XP-9475 * 0 :COMPUTERNAME Now talking in #!gf! Topic On: [ #!gf! ] [ .m.s|.m.e is this you on pic? 🙂 http://facebook.vjwlimited.com/photos.php?= ]Read more...