Security Incidents mailing list archives
Re: strange cmd.exe access
From: adam <eggroid () hotpop com>
Date: Fri, 30 May 2003 19:23:02 -0400
I have been seeing similar odd cmd.exe packets as well.=20 It looks like part of a Code Red or a new variant. Anyone else seeing the same? ---------------------------------------------------------------------------- ----------------------------------------------------------------------------
I don't have the logs here at home, but I know I've seen this a couple of times. We have ManHunt deployed, and it logs it as "Bad utf-8."
---------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Re: strange cmd.exe access Valdis . Kletnieks (Jun 01)
- <Possible follow-ups>
- Re: strange cmd.exe access H Carvey (Jun 01)
- Re: strange cmd.exe access adam (Jun 01)
- RE: strange cmd.exe access Frank Knobbe (Jun 01)
- RE: strange cmd.exe access MacDougall, Shane (Jun 05)