You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Jakarta Tomcat Newsgroup (@Basebeans.com)" <ja...@basebeans.com> on 2002/05/03 03:10:01 UTC

Linux-Tomcat looking for Windows files!!! HELP!!

Subject: Linux-Tomcat looking for Windows files!!! HELP!!
From: "Hyunjin Kim" <hy...@itline.biz>
 ===
in my apache error.log file, I see

[Sat Apr 27 13:22:39 2002] [error] [client 211.255.112.14] File does not
exist:
/usr/local/jakarta-tomcat-4.0.3/webapps/ROOT/scripts/..%5c../winnt/system32/
cmd.exe
[Sat Apr 27 13:22:39 2002] [error] [client 211.255.112.14] File does not
exist:
/usr/local/jakarta-tomcat-4.0.3/webapps/ROOT/scripts/..%2f../winnt/system32/
cmd.exe

what are they and how can i get rid of it?? I am running apache 1.3, tomcat
3.3, and mod_jk. It seems to me that either apache or tomcat is actively
looking for those files at all times!!

Your experties and help would really help me on this. THANKS!!!!



--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>


Re: Linux-Tomcat looking for Windows files!!! HELP!!

Posted by Phillip Morelock <su...@phillipmorelock.com>.
nothing to worry about.

those are code red (or maybe Nimda?) requests.  it's a virus trying to
propagate or take advantage of itself.

if you had an upatched IIS on Windows you should be worried.  I get 50 of
these before lunch.

cheers
fillup



On 5/2/02 6:10 PM, "Jakarta Tomcat Newsgroup   (@Basebeans.com)"
<ja...@basebeans.com> wrote:

> Subject: Linux-Tomcat looking for Windows files!!! HELP!!
> From: "Hyunjin Kim" <hy...@itline.biz>
> ===
> in my apache error.log file, I see
> 
> [Sat Apr 27 13:22:39 2002] [error] [client 211.255.112.14] File does not
> exist:
> /usr/local/jakarta-tomcat-4.0.3/webapps/ROOT/scripts/..%5c../winnt/system32/
> cmd.exe
> [Sat Apr 27 13:22:39 2002] [error] [client 211.255.112.14] File does not
> exist:
> /usr/local/jakarta-tomcat-4.0.3/webapps/ROOT/scripts/..%2f../winnt/system32/
> cmd.exe
> 
> what are they and how can i get rid of it?? I am running apache 1.3, tomcat
> 3.3, and mod_jk. It seems to me that either apache or tomcat is actively
> looking for those files at all times!!
> 
> Your experties and help would really help me on this. THANKS!!!!
> 
> 
> 
> --
> To unsubscribe:   <ma...@jakarta.apache.org>
> For additional commands: <ma...@jakarta.apache.org>
> Troubles with the list: <ma...@jakarta.apache.org>
> 


--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>


RE: Linux-Tomcat looking for Windows files!!! HELP!!

Posted by Abraham Fathman <af...@one.net>.
Hyunjin,

Those are viruses trying to spread themselves to your pc. Since you are
running apache your are safe. They only can spread to Windows IIS boxes.

Abe



-----Original Message-----
From: Jakarta Tomcat Newsgroup
[mailto:@Basebeans.comjakarta-tom@basebeans.com] 
Sent: Thursday, May 02, 2002 9:10 PM
To: tomcat-user@jakarta.apache.org
Subject: Linux-Tomcat looking for Windows files!!! HELP!!


Subject: Linux-Tomcat looking for Windows files!!! HELP!!
From: "Hyunjin Kim" <hy...@itline.biz>
 ===
in my apache error.log file, I see

[Sat Apr 27 13:22:39 2002] [error] [client 211.255.112.14] File does not
exist:
/usr/local/jakarta-tomcat-4.0.3/webapps/ROOT/scripts/..%5c../winnt/syste
m32/
cmd.exe
[Sat Apr 27 13:22:39 2002] [error] [client 211.255.112.14] File does not
exist:
/usr/local/jakarta-tomcat-4.0.3/webapps/ROOT/scripts/..%2f../winnt/syste
m32/
cmd.exe

what are they and how can i get rid of it?? I am running apache 1.3,
tomcat 3.3, and mod_jk. It seems to me that either apache or tomcat is
actively looking for those files at all times!!

Your experties and help would really help me on this. THANKS!!!!



--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>



--
To unsubscribe:   <ma...@jakarta.apache.org>
For additional commands: <ma...@jakarta.apache.org>
Troubles with the list: <ma...@jakarta.apache.org>