This is not the Chinese Code Red Worm. The Code Red worm exploits a vulnerability in the IIS idq.dll file through .idq and .ida files. The above mentioned logs represent a hacker scan on your system for the IIS unicode or IIS encode/decode vulnerability.
It seems by the above mentioned logs...
Adding "IUSR_yourdomain" to the Administrator group is VERY dangerous. Its like giving all visitors Administrator access to your intranet server. To solve the asp problem, you should configure the server to let the guest user ( "|USR_yourdomain" ) have execute permission to...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.