CMD.exe

[stefan009]

[my-url.com...]

I'm getting a few variations of the above in my logs, I believe its a type of worm.

Is it a good idea to mod the root .htaccess, its receiving a 404 and occasionally a 400 at present.

Regards

[moltar]

If you are using apache you are safe. Those requests are targeted at MS IIS server. It's an old virus that's doing it. I don't remember it's name (CodeRed?)...

[stefan009]

# Nimda
RewriteCond %{REQUEST_URI} /(admin¦cmd¦httpodbc¦nsiislog¦root¦shell)\.(dll¦exe) [NC,OR]

I've put this in..

Regards,