Remote Host Port Number 204.0.5.40 80 204.0.5.41 80 204.0.5.48 80 204.0.5.50 80 204.0.5.51 80 204.0.5.59 80 207.38.101.12 80 216.178.38.103 80 216.178.38.168 80 63.135.86.30 80 66.225.219.7 1234 ircd here PASS xxx JOIN #jakarta test MODE NEW-[USA|00|P|03217] -ix NICK NEW-[USA|00|P|03217] USER XP-9813 * 0 :COMPUTERNAME PONG irc.priv8net.com * The data identified by the following URLs was thenRead more...
url.digitwordurl.com
url.digitwordurl.com 213.154.225.135 update.articlesdealing.com 74.86.97.166 74.86.97.166 74.86.97.166 Download URLs http://74.86.97.166/check.php (update.articlesdealing.com) * C&C Server: 213.154.225.135:1234 * Server Password: * Username: XP-3409 * Nickname: NEW-[DEU|00|P|04478] * Channel: #jakarta (Password: test) * Channeltopic: :.m.s|.m.n foto 😀 http://tinyurl.com/fb-views-album Outgoing connection to remote server: update.articlesdealing.com TCP port 80 Resolved : [url.digitwordurl.com] To [213.154.225.135] Resolved : [url.digitwordurl.com] To [200.113.159.243] browseusers.myspace.com browseusers.myspace.comRead more...
irc.ThunderNet.gr
Remote Host Port Number 123.242.226.29 14032 NICK latest_|USA||XP-SP2|631276 USER 6476 “” “lol” :6476 JOIN #.x.# %3%#%!%#^#%@^ PONG :irc.ThunderNet.gr Registry Modifications * The newly created Registry Values are: o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] + Java updater2 = “%Temp%jusched2.exe” so that jusched2.exe runs every time Windows starts o [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun] + Java updater2 = “%Temp%jusched2.exe” so that jusched2.exe runs every timeRead more...
173.203.112.32
Remote Host Port Number 173.203.112.32 81 NICK n[USA|XP]1345482 USER s “” “lol” :s JOIN #newbin# PONG 422 JOIN #USA (null) * The following port was open in the system: Port Protocol Process 1055 TCP msng.exe (%AppData%msng.exe) Registry Modifications * The newly created Registry Value is: o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun] + Windows System Guard = “%AppData%msng.exe” so thatRead more...
doko.no-ip.org
doko.no-ip.org 72.20.1.26 Opened listening TCP connection on port: 13156 * C&C Server: 72.20.1.26:6667 * Server Password: * Username: ilkxj * Nickname: [nLh-VNC]wkceru * Channel: ##!seuz!## (Password: hackmx) * Channeltopic: :+scan 60 1 189.x.x.x 3 1 200.x.x.x Outgoing connection to remote server: 200.133.0.250 TCP port 5900 Outgoing connection to remote server: 200.216.191.20 TCP port 5900 OutgoingRead more...
95.211.21.131
Remote Host Port Number 95.211.21.131 8888 NICK i{USA|XP}euyuyij USER i{USA|XP}euyuyij 0 0 :i{USA|XP}euyuyij JOIN #botoholiker Registry Modifications * The following Registry Key was created: o HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionApp * The following Registry Keys were deleted: o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBoot o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimal o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimalAppMgmt o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimalBase o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimalBoot Bus Extender o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimalBoot file system o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimalCryptSvc o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimalDcomLaunch o HKEY_LOCAL_MACHINESYSTEMControlSet001ControlSafeBootMinimaldmadminRead more...
173.204.76.243
Remote Host Port Number 173.204.76.243 81 NICK n[USA|XP]0956120 USER s “” “lol” :s JOIN #newbin# PONG 422 JOIN #USA (null) Now talking in #newbin# Topic On: [ #newbin# ] [ .st ] Topic By: [ vps ] * The following port was open in the system: Port Protocol Process 1057 TCP msng.exe (%AppData%msng.exe) Registry ModificationsRead more...
95.154.216.63
Remote Host Port Number 95.154.216.63 3211 PASS Virus NICK VirUs-prpgqjsq USER VirUs “” “hjr” : 8Coded 8VirUs.. JOIN #koko# Virus PONG :fbi.gov Registry Modifications * The following Registry Key was created: o HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{67XOR2B0-3GMC-89VV-JIJ1-24KL2R3222431} * The newly created Registry Value is: o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{67XOR2B0-3GMC-89VV-JIJ1-24KL2R3222431}] + StubPath = “c:SABERV2009SABER.exe” so that SABER.exe runs everyRead more...
eaglezinc.com
Remote Host Port Number eaglezinc.com 4723 join #EaGLeZ NICK n{USA|XP}fopvzai USER n{USA|XP}fopvzai 0 0 :n{USA|XP}fopvzai * To mark the presence in the system, the following Mutex object was created: o DirectSound Administrator shared thread array (lock) * The following Host Name was requested from a host database: o eaglezinc.com Registry Modifications * The following RegistryRead more...
join.kizlarevi.net
PING join.kizlarevi.net USER [NEW|9898] False * :neOn1 NICK [NEW|9898] JOIN #k9 PONG :You have not registered JOIN ##USA Now talking in #k9 Topic On: [ #k9 ] [ !p2p ] Topic By: [ LnX ] join.kizlarevi.net 95.154.241.53 mue-88-130-35-093.dsl.tropolys.de 88.130.35.93 join.kizlarevi.net Opened listening TCP connection on port: 113 * C&C Server: 95.154.241.53:6667 * Server Password: *Read more...