string_nick NICK
string_join JOIN
string_part PART
string_quit QUIT
string_privmsg PRIVMSG
string_pass PASS
string_ping PING
string_pong PONG
string_user USER
string_firewall_location SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\StandardProfile\\AuthorizedApplications\\List
string_firewall_enabled :*:Enabled:
string_autostart_location Software\\Microsoft\\Windows\\CurrentVersion\\Run
string_autostart_description cftmon
string_botversion SiNBoT 7.0
string_mode MODE
cfg_exchannel #sxychat
cfg_ftpchannel #sxychat
cfg_ftp_user SiNiSTER
cfg_ftp_pass ghd0minat3
string_ftpdstart1 Transfering
string_ftpdstart2 to:
string_ftpddone1 Transfered
string_ftpddone2 to:
string_scanoff1 Turning
string_scanoff2 spr34d
string_scanoff3 off...
string_alreadyscan1 Spr34d
string_alreadyscan2 already
string_alreadyscan3 running.
cfg_botversion S1N1ST3RB0Tv.1.0
cfg_ircchannel #sxychat
cfg_ircchanpass snethasbeeninit
cfg_filename netspool.exe
cfg_destination System
cfg_mutex sdsyutug65h87iteu6f
cfg_firewall_description K32DbG
botfilename1 lretscr.exe
daemonftpuser1 mp_619821
daemonftppass1 ghd0minat3
string_downloaded Downloaded:
string_nostart1 Failed 
string_nostart2 to 
string_nostart3 run 
string_nostart4 file:
string_running1 File 
string_running2 running:
string_removing1 File 
string_removing2 running, 
string_removing3 now 
string_removing4 removing...
string332 332
stringMOTD MOTD
string433 433
stringShell32 Shell32
hpot1 sandbox 
hpot2 honey
hpot3 vmware
hpot4 currentuser
hpot5 nepenthes
struser32 user32.dll
strkernel32 kernel32.dll
strshell Shell_TrayWnd
string_ftpd_2201 220 
string_ftpd_2002 Hello!
string_ftpd_5301 530 
string_ftpd_5302 Login 
string_ftpd_5303 or 
string_ftpd_5304 Password 
string_ftpd_5305 incorrect.
string_ftpd_3311 331 
string_ftpd_3312 Password 
string_ftpd_3313 required.             
string_ftpd_2301 230 
string_ftpd_2302 User 
string_ftpd_2303 logged 
string_ftpd_2304 in.
string_ftpd_2211 221 
string_ftpd_2212 Bye.
string_ftpd_2001 200 
string_ftpd_2002 PORT 
string_ftpd_2003 command 
string_ftpd_2004 successful
string_usr USER
string_pss PASS
string_prt PORT
strftpd1 FTPD
strftpd2 on:
strExploited Exploited:
strex1 SharedAccess
strex2 echo
strex3 ftp
strex4 net
strex5 start
strex6 user
strex7 cmd
strex8 open
strex9 exe
host1 www.google.com
host2 www.yahoo.com
kproc1 EnumProcesses
kproc2 Process32First
kproc3 Process32Next
kproc4 Module32First
kproc5 Module32Next
kproc6 CreateToolhelp32Snapshot
kproc7 EnumProcessModules
cmd_vers v
cmd_dl dl
cmd_sc sc
cmd_sa sa
cmd_sm sm
cmd_r r
cmd_q q
cmd_d d
cmd_site slobodon.kwik.to/bot.exe
cmd_1 1
cmd_2 2
cmd_ss ss
cmd_sc sc
cmd_s s
cmd_bk bk
cmd_gc gc
cmd_rm rm
//cmd_loc
