Web Hosting Talk







View Full Version : what should I do with this appearing in the logs?


chuckt101
08-08-2001, 01:44 PM
IP TRACKER
Date Time Page
08/08/01 - Wed 02:00:22 AM /scripts/..%c0%af../winnt/system32/cmd.exe
08/08/01 - Wed 02:00:22 AM /msadc/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
08/08/01 - Wed 02:00:23 AM /_vti_bin/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe
08/08/01 - Wed 02:00:23 AM /iisadmpwd/..%c0%af../..%c0%af../..%c0%af../winnt/system32/cmd.exe

Is this that code red stuff?... This is a RedHat Linux server, so Code Red can't hurt it right?

ckizer
08-08-2001, 01:52 PM
This is the code red virus. Below are the important steps listed you need to take for your linux/unix based server.

STEPS

1. Look at logs

2. Grin

3. Laugh

4. Try to stop Laughing

5. After wiping all the tears from your eyes, and holding your aching sides, Pat yourself on the back.

6. Be happy all day!

ckizer
08-08-2001, 01:56 PM
ADDITIONAL BONUS STEP:

Pretend to be nice to your Windows friends, after all they are having a very bad week :D

chuckt101
08-08-2001, 01:57 PM
steps followed.

except for the bonus step. I dont make friends with window's users... :stickout