<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 5.50.4522.1800" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial>I have been getting some weird entries off of one of
my Linux servers running apache. Does any of this look familiar to any of you? I
think that it must be an infected Microsoft box trying to find other Microsoft
servers to infect.</FONT></DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial></FONT> </DIV>
<DIV><FONT face=Arial><!--StartFragment-->[Mon Nov 12 04:17:29 2001]
[error] [client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/root.exe<BR>[Mon Nov 12 04:17:30 2001] [error] [client
64.39.78.13] File does not exist: /home/httpd/html/MSADC/root.exe<BR>[Mon Nov 12
04:17:30 2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/c/winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:30 2001] [error]
[client 64.39.78.13] File does not exist:
/home/httpd/html/d/winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:30 2001] [error]
[client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/..%5c../winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:30
2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe<BR>[Mon
Nov 12 04:17:30 2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe<BR>[Mon
Nov 12 04:17:31 2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/msadc/..%5c../..%5c../..%5c/..Á ../..Á ../..Á ../winnt/system32/cmd.exe<BR>[Mon
Nov 12 04:17:31 2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/..Á ../winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:31
2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/..À¯../winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:31
2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/..Áœ../winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:32
2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/..%5c../winnt/system32/cmd.exe<BR>[Mon Nov 12 04:17:32
2001] [error] [client 64.39.78.13] File does not exist:
/home/httpd/html/scripts/..%2f../winnt/system32/cmd.exe<BR></DIV></FONT>
<DIV><BR><BR>
<TABLE width="100%">
<TBODY>
<TR>
<TD align=left>Thanks,<BR><BR><BR>Daniel<BR>Webmaster for:<BR><A
href="http://www.srj.net">http://www.srj.net</A><BR><A
href="http://www.hometownhospital.com">http://www.hometownhospital.com</A><BR><A
href="http://www.easyhealthcare.net">http://www.easyhealthcare.net</A><BR><A
href="http://www.ngpa.org">http://www.ngpa.org</A><BR><A
href="http://www.cathedralofhope.com">http://www.cathedralofhope.com</A><BR><A
href="http://www.iusarentals.com">http://www.iusarentals.com</A><BR><BR><!-- BEGIN HumanClick Button Code -->
<TABLE cellSpacing=0 cellPadding=0 border=0>
<TBODY>
<TR>
<TD align=middle><A
onclick="window.open('http://hc2.humanclick.com/hc/20922718/?cmd=file&file=visitorWantsToChat&site=20922718','chat20922718','width=472,height=320');return false;"
target=chat20922718
href="http://hc2.humanclick.com/hc/20922718/?cmd=file&file=visitorWantsToChat&site=20922718&byhref=1"><IMG
height=37
src="http://hc2.humanclick.com/hc/20922718/?cmd=repstate&site=20922718&imageUrl=http://www.srj.net/humanclick&ver=1"
width=152 border=0 name=hcIcon></A></TD></TR></TBODY></TABLE><BR>
<TABLE width="100%">
<TBODY>
<TR>
<TD align=left></TD></TR></TBODY></TABLE><BR>*** CONFIDENTIALITY NOTICE
*** Privileged/Confidential Information may be contained in this message
and/or its attachments. This message and its attachments are intended only
for use by the individual(s) listed as the recipient(s). If you are not
one of the intended recipient(s), or responsible for delivery of the
message to such person, you are hereby notified that any disclosure,
copying, distribution, or the taking of any action in reliance on the
contents of this information is strictly prohibited. If you have received
this message in error, please notify the sender by return email and
destroy all copies of the email. Opinions, conclusions and other
information in this message that do not relate to official company
business shall be understood as neither given nor endorsed by the company.
</TR></TBODY></DIV></BODY></HTML>