104.09.22 23:15 B C:\covertcomic\cgi-bin\htimage.exe <-- covert comic /johnaking/cgi-bin htimage.exe
104.09.22 23:15 B C:\covertcomic\cgi-bin\imagemap.exe <-- covert comic /johnaking/cgi-bin imagemap.exe
104.09.22 23:21 B C:\covertcomic\cgi-bin\htimage.exe --> 207.172.13.47 /covertcomic/cgi-bin htimage.exe
104.09.22 23:21 B C:\covertcomic\cgi-bin\imagemap.exe --> 207.172.13.47 /covertcomic/cgi-bin imagemap.exe