tijs.org

The following is from my site statistics of the past 4 days. The Nimda virus is still living large. The first part of the following 10 lines is the program it tried to execute and the second the amount of times it tried.

URL - Accesses
/scripts/..%5c../winnt/system32/cmd.exe 689
/scripts/root.exe 398
/MSADC/root.exe 377
/c/winnt/system32/cmd.exe 374
/d/winnt/system32/cmd.exe 370
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 356
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe 351
/msadc/..%5c../..%5c../..%5c/..? ../..? ../..? ../winnt/system32/cmd.exe 345
/scripts/..? ../winnt/system32/cmd.exe 344
/scripts/..?/../winnt/system32/cmd.exe 342

This entry was posted on Saturday, September 22nd, 2001 at 14:26 and is filed under The rest. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.