Re: [PHP-WIN] Hack Q...

2003-08-14 Thread Jon Phipps
That is the tell tale sign that either nimda or code red, I for get which have been scouting your system. If you run apache server dont worry about it as they can only opperate on IIS platforms. JON Skate wrote: Is someone trying to hack my computer? "GET /scripts/..%255c%255c../winnt/system

RE: [PHP-WIN] Hack Q...

2003-08-14 Thread Svensson, B.A.T. (HKG)
It seams like your system is exposed for an old worm named "Nimda". (And I think you should follow another authors advivice and do a reverse lookup on the IP# and contact the domain owner about this incident.) Check out http://www.cert.org/advisories/CA-2001-26.html for more information and how t

Re: [PHP-WIN] Hack Q...

2003-08-14 Thread skate
> Is someone trying to hack my computer? > > "GET /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" > > Any idea what this means? > there's a thousand and one tools that will run searches for regular exploits. someone is trying to gain access to your computer, but unless you have a /scrip

Re: [PHP-WIN] Hack Q...

2003-08-14 Thread erythros
just google it... paste that sting into google. you'll learn all about what its trying to do and if you need to worry about it. "Jon Phipps" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > That is the tell tale sign that either nimda or code red, I for get > which have been scouting