Welcome to WebmasterWorld Guest from 107.20.54.98

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

Start.exe User Agent?

from fdcservers.net

     
7:52 am on Jul 21, 2012 (gmt 0)

Administrator from US 

WebmasterWorld Administrator incredibill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Jan 25, 2005
posts:14624
votes: 88


Three hits fdcservers.net in a minute, very bizarre:

67.159.8.164,"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)","/index.html"
67.159.8.164,"start.exe","/index.html"
67.159.8.164,"Mozilla/4.0 (compatible; MSIE 6.0; Windows 98; Win 9x 4.90)","/index.html"

Is this trying to run a virus or something?
10:21 pm on July 21, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3092
votes: 2


A quick check on ixquick suggests a virus on the host machine (not your server) or an avant browser update thingy or advertising software dumped on a machine or...

Difficult to pin down, really but your log entry above suggests it's a UA of a tool on the visitor's m/c and not an attempt to run software on your server?
10:32 pm on July 21, 2012 (gmt 0)

Administrator from US 

WebmasterWorld Administrator incredibill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Jan 25, 2005
posts:14624
votes: 88


Since it came from a hosting site, not a residential machine, so I suspect something foul
8:03 pm on July 22, 2012 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3092
votes: 2


Doubtless you're right. Virus of some kind - still a lot of it about. :(