[Suns-at-Home] Re: Odd httpd error entries - probe attempts?

[paul@anastrophe.com]

That's the Nimda worm. Go to mcafee.com or symantec for plenty of details. 


Brian P. Costello writes: 

> I have been seeing a strange trend in my log files that track my web site
> traffic and I want to see if anyone knows what is going on with it. I have many
> entries every day from many different address all looking for the same files
> in my http DocumentRoot directory (/export/home/htdocs). They are as follows: 
> 
> scripts/root.exe
> MSADC/root.exe
> c/winnt/system32/cmd.exe
> d/winnt/system32/cmd.exe

 ---------------------------------
Paul Theodoropoulos
paul@anastrophe.net
Senior Unix Systems Administrator
Syntactically Subversive Services, Inc.
http://www.anastrophe.com
Downtime Is Not An Option