More Log info from the Nimda

  • From: "Troy A. Wilfred" <twilfred@xxxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 18 Sep 2001 21:40:18 -0400

All the locations that were created by Code Red!

 

80 GET /scripts/root.exe /c+dir 404 -

80 GET /MSADC/root.exe /c+dir 403 -

80 GET /c/winnt/system32/cmd.exe /c+dir 404 -

80 GET /d/winnt/system32/cmd.exe /c+dir 404 -

 

If your patched you should be getting these 40x errors in your IIS log.

 

Troy

Other related posts:

  1. Home
  2. isalist
  3. Archive
  4. 09-2001