Page 1 of 1

CMD.exe error in 404 log...

Posted: Tue Jul 13, 2004 2:33 pm
by palmere
Hey all,

I keep getting numerous 404 errors in my error logs of my web site eventually pointing to "winnt/system32/cmd.exe" with varying prefixes before the "winnt" path. I did a little searching and some people seem to mention that it has something to do with a popup program or spyware. A few questions come to mind... just rambling here:
  • Has anyone had any issues with this in the past?
    Does anyone know of any good resources that I should look into?
    Is it possible that this is the result of a spyware that's on the client side that is searching through my pages to find executables?
Thanks a million.

E

P.S. I'm hosted on a Windows 2003 CrystalTech server.

Posted: Tue Jul 13, 2004 2:46 pm
by feyd
it's hacking attempts, search for vulnerable server things.. most look for windows server (IIS) based ones.. and buffer overflows.. My machine gets them all the time, because <span style='color:blue' title='I&#39;m naughty, are you naughty?'>smurf</span> love to run port scans and try to hack into systems on my network (Comcast)

thanks

Posted: Tue Jul 13, 2004 5:20 pm
by palmere
Thanks for the quick response. I contacted my host and they assured me that it's entirely normal. Even though I've had nearly 200 hack attempts in the last 6 days.

Relieved but angry at the world that likes to make computer usage more difficult,
E