Meh...fuck tech support.
"Matt
Hello and welcome to Webair Live! What can I help you with today?
Lee Carey
Hey Matt. I don't know if this should be a concern or not but I figured I would send it in anyway. I keep getting this in my "Documents not found" stats:
Lee Carey
/scripts/..%5c../winnt/system32/cmd.exe
/scripts/..À¯../winnt/system32/cmd.exe
/scripts/..Áœ../winnt/system32/cmd.exe
/scripts/..%2f../winnt/system32/cmd.exe
/scripts/root.exe
/MSADC/root.exe
/c/winnt/system32/cmd.exe
/d/winnt/system32/cmd.exe
/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe
/scripts/..Á ../winnt/system32/cmd.exe
/scripts/..À/../winnt/system32/cmd.exe
Lee Carey
From what I understand it's the Code Red virus attack and if the root.exe comes back as 200 hackers can gain access to my server or you guys server or the box or something lol. I am no tech, so I thought I would bring it to you guys.
Matt
What machine is this Lee?
Lee Carey
It's on pornpapa.com
Matt
Lee your are on a shared unix based server.
Matt
I do not see how this has anything to do with such?
Lee Carey
No idea Matt. I just asked around on Oprano what I should do this morning if I see that in my stats because I thought it was sort of strange and they said to contact you guys and let you know it's going on.
Lee Carey
I know nothing about how any of it works at all.
Matt
It is not even in the scope of being a security concern on our end.
Lee Carey
Alright then everything is cool then?
Matt
The code red virus is a worm from 3 years ago that was exclusively limited to windows machine. I don't see how this would be relevant at all?
Lee Carey
Well Matt...I saw the stats, I thought it was strange, and since I am on a virtual account, I figured I would contact you guys just incase. I don't know how the worm works, or if it was relevant. I don't keep up with worms and server stuff."
|