Printer Friendly Version
Email this thread to a friend
|
Featured Web Site Template |
|
Reflects user activity within the last 5 minutes
|
|
| Member |
Message |
Oipete
Joined: Nov 28, 2002
# Posts: 15
|
Posted: 2003-Jun-04 10:42
Hi, could anyone tell me how to stop all the cmd.exe requests causing all the error logs in my reports. Is there any way to stop what is, I imagine, hackers trying to get access to my root folders etc.
Any help would be much appreciated.
Thanks
|
 |
excell
Staff
Joined: Mar 19, 2001
# Posts: 14513
|
Posted: 2003-Jun-04 15:42
moved from Professional SEO Issues
|
|
crash
Staff
Joined: Dec 02, 2003
# Posts: 10626
|
Posted: 2003-Jun-04 16:59
It's a virus probing your server looking for a way in. I don't think you can stop the requests as you'd have to have control of the box performing the requests but you might be able to block the IP or notifiy the sender that they have a virus.
|
|
Prowler
Staff
Joined: Aug 14, 2000
# Posts: 1832
|
Posted: 2003-Jun-19 02:07
The easy solution would be to use the .htaccess feature of the powerful Apache server. Use something like the following to serve a minimum size file:
RewriteEngine On
RewriteBase /
RewriteRule .*.exe? nimda.html
The above directives should be saved as plain text under the name of .htaccess and located in the root directory.
|
|
Curious_Mark
Joined: Dec 02, 2001
# Posts: 2142
|
Posted: 2003-Jun-19 05:46
What exactly does the above do Prowler?
|
|
Prowler
Staff
Joined: Aug 14, 2000
# Posts: 1832
|
Posted: 2003-Jun-29 03:47
I am sorry for the delay. The above 'traps' any request to *.exe file and then sends a small nimda.html. This file can have a tracking script embedded in it.
|
|
You are not permitted to post messages in this forum or topic, because of one or more of the following reasons:
- You have not yet logged in, or registered properly as a member
- You are a member, but no longer have posting rights.
- This is a private forum, for which you do not have permissions.
If you are a recent member, it's possible that you simply have not yet confirmed your account. Please
check your email for a message entitled 'JimWorld Forums: Confirm Your Account' and follow the instructions
contained within.
If you cannot find this message, click here to Re-Send it.
|
If you are still experiencing problem, please read the
Login Assistance
Article for some advice on what may be causing your login not to work properly.
|
Switch to Advanced Editor and ...
Create a New Topic
or Reply to this Thread
|
|
Inbox
