Re: Asian Teen Bondage 5241
Xerxes
> 14 year old asian girl getting tied up and fucked by 4 men
>
> http://www.theparadise.x-y.net/AsianTeenBondage.zip
> fpupdfjkrqxiiqexqpusldvhfwz
The zip file is a virus/worm for Windows.
Seems the sender has no clue.
Greg
email his isp :)
--
Registered Linux User #348506
Sander de Leeuw
[snip]
> The zip file is a virus/worm for Windows.
> Seems the sender has no clue.
It's connecting to some ircd server:
1 0.000000 192.168.50.40 10.0.0.138 DNS Standard query A h.hackarmy.tk
2 0.087248 10.0.0.138 192.168.50.40 DNS Standard query response A 63.135.4.174
3 0.087662 192.168.50.40 63.135.4.174 TCP 34911 > ircd [SYN] Seq=0 Ack=0 Win=5840 Len=0 MSS=1460 TSV=95001875 TSER=0 WS=0
4 0.195090 63.135.4.174 192.168.50.40 TCP ircd > 34911 [SYN, ACK] Seq=0 Ack=1 Win=17520 Len=0 MSS=1460 WS=0 TSV=0 TSER=0
5 0.195121 192.168.50.40 63.135.4.174 TCP 34911 > ircd [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=95001983 TSER=0
6 0.195545 192.168.50.40 10.0.0.138 DNS Standard query PTR 40.50.168.192.in-addr.arpa
7 0.205333 10.0.0.138 192.168.50.40 DNS Standard query response, No such name
8 0.205488 192.168.50.40 63.135.4.174 IRC Request
9 0.312343 63.135.4.174 192.168.50.40 IRC Response
10 0.312362 192.168.50.40 63.135.4.174 TCP 34911 > ircd [ACK] Seq=44 Ack=51 Win=5840 Len=0 TSV=95002100 TSER=9063287
11 0.425766 63.135.4.174 192.168.50.40 IRC Response
12 0.425811 192.168.50.40 63.135.4.174 TCP 34911 > ircd [ACK] Seq=44 Ack=92 Win=5840 Len=0 TSV=95002214 TSER=9063288
13 1.625197 63.135.4.174 192.168.50.40 IRC Response
14 1.625241 192.168.50.40 63.135.4.174 TCP 34911 > ircd [ACK] Seq=44 Ack=108 Win=5840 Len=0 TSV=95003413 TSER=9063300
15 1.631125 192.168.50.40 63.135.4.174 IRC Request
16 1.751155 63.135.4.174 192.168.50.40 IRC Response
17 1.751455 192.168.50.40 63.135.4.174 IRC Request
18 1.859920 63.135.4.174 192.168.50.40 IRC Response
19 1.899512 192.168.50.40 63.135.4.174 TCP 34911 > ircd [ACK] Seq=78 Ack=1231 Win=7637 Len=0 TSV=95003688 TSER=9063302
20 2.025517 63.135.4.174 192.168.50.40 IRC Response
21 2.025559 192.168.50.40 63.135.4.174 TCP 34911 > ircd [ACK] Seq=78 Ack=1771 Win=9819 Len=0 TSV=95003814 TSER=9063304
Request Line: NICK ovmcmxbt
Request Line: USER ovmcmxbt "x.com" "x" :x
Response Line: :yudae10.m00p.org NOTICE AUTH :*** Connecting...
Response Line: :yudae10.m00p.org NOTICE AUTH :[+] Host
Response Line: PING :B941654B
Request Line: PONG :B941654B
Response Line: :yudae10.m00p.org 001 ovmcmxbt :This is the m00p.org IRC Network ovmcmxbt!~ovmcmxbt@******************
Response Line: :yudae10.m00p.org 002 ovmcmxbt :Your host is yudae10.m00p.org, running version Unreal3.2 (AenoxYudae)
Response Line: :yudae10.m00p.org 003 ovmcmxbt :This server was created Sat Jun 12 20:42:39 2004
Response Line: :yudae10.m00p.org 004 ovmcmxbt yudae10.m00p.org Unreal3.2 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeKVfMGCuzNT
Response Line: :yudae10.m00p.org 005 ovmcmxbt MAP KNOCK SAFELIST HCN MAXCHANNELS=5 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYL$ Response Line: :yudae10.m00p.org 005 ovmcmxbt WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQ$ Response Line: :yudae10.m00p.org 422 ovmcmxbt :^B^C4THIS IS A PRIVATE SERVER.^C^B If you proceed you are violating code 431.322.12 of the Internet Pr$ Request Line: JOIN ##h## grandad
Response Line: :ovmcmxbt MODE ovmcmxbt :+iwxp
Response Line: :ovmcmxbt!~ovmcmxbt@----5EB7473.xs4all.nl JOIN :##h##
Response Line: :yudae10.m00p.org 332 ovmcmxbt ##h## :
Response Line: :yudae10.m00p.org 333 ovmcmxbt ##h## maxo 1089806225
Response Line: :yudae10.m00p.org 353 ovmcmxbt @ ##h## :ovmcmxbt
Response Line: :yudae10.m00p.org 366 ovmcmxbt ##h## :End of /NAMES list.
Response Line: :Global!serv...@m00p.org NOTICE ovmcmxbt :[^BLogon News^B - May 25 2004] ^BThis is a private server, anyone here who is not invited w$