dinsdag 9 februari 2010

You can say that it's the time of the year. Valentine spam!

As you can see we have received 2 emails with funny links in it. These 2 files are self executables. So look out when you open them! Else you would be infect. So first open winrar and then open the exe file. Inside the file you will find a modified mirc client with some mirc script commands connect, yes again, to undernet.

You have recieved a Hallmark E-Card.
To see it, click *here* , hXXp://xenonshow.gr/hallmark-card.exe

There's something special about that E-Card feeling. We invite you to make a
friend's day and *send one* . hXXp://xenonshow.gr/hallmark-card.exe

donderdag 4 februari 2010

mechbot madness

Would you look at that. Capture a psybnc and yet again a new mechbot. All connected, again, to undernet channel #plecat

Want to use the psybnc? then just connect to port 5544 (passwd is Czech). So you can see where this guy is connected too.

22:00 -!- #plecat corsa H@ 3 corsa@corsa.dk.cx [*!*@corsa.users.undernet.org]
22:00 -!- #plecat nSCLb H@ 3 ~Debian@ns.clb.enforta.com [Debian]
22:00 -!- #plecat Czech_ H@ 3 ~f@mail.rosepathroses.com [Sorin aka Czech]
22:00 -!- #plecat cz3ch_ H@ 3 ~czech@mail.rosepathroses.com [czech]
22:00 -!- #plecat IdTech H@ 3 ~id@ns.clb.enforta.com [Tech]
22:00 -!- #plecat cz3ch H@ 3 ~Debian@41.220.237.50 [Debian]
22:00 -!- #plecat _Sorinake H@ 3 ~Sorinel@ns.clb.enforta.com [Sorinel]
22:00 -!- #plecat Solutions H@ 3 ~Solutions@94.25.80.147 [Solutions]
22:00 -!- #plecat AntiDrog H@ 3 ~dpir@75-146-195-225-Philadelphia.hfc.comcastbusiness.net [Departamentul De Interventie Rapida]
22:00 -!- #plecat LnXTrades H@ 3 ~Alice@75-146-195-225-Philadelphia.hfc.comcastbusiness.net [Curva De Meserie]
22:00 -!- #plecat Stropinika H@ 3 ~ropotan@75.146.195.225 [Memory Brown here comes the summer son ...]
22:00 -!- #plecat Csazar H@x 3 Csazar@Eset.users.undernet.org [Csazar.international]
22:00 -!- #plecat CheckSpam H@ 3 Helper@powered.by.ircd.im [Helper #GigaHosT]
22:00 -!- #plecat |Visul H@ 3 ~Dreams@130.191.5.235 [Visez Frumos]
22:00 -!- #plecat Sorika H@ 3 ~Sorika@130.191.5.235 [Sorika]
22:00 -!- #plecat Czech H@ 3 ~Czech@130.191.5.235 [CehuL Din Cehia]
22:00 -!- #plecat twitter H@ 3 ak47@website.bsd.im [twitter.de]
22:00 -!- #plecat Soryka H@ 3 ~Sorinel@41.220.237.50 [Sorinel]
22:00 -!- #plecat Registru H@ 3 ~Registru@94.25.80.147 [Marca Inregistrata]
22:00 -!- #plecat dulcica3 H@ 3 ~dulce@94.25.80.147 [A Dracu Acritura]
22:00 -!- #plecat Dea H@dx 3 ~Damian@OkyOky.users.undernet.org [Dominika]
22:00 -!- #plecat Diav0litza H@ 3 ~Diav0litz@41.220.237.50 [Hey Pysy ...]

URL:
arhive.ucoz.net/allmech.tgz 
http://vladutz.110mb.com/trades/psyro.tgz.gz