Re: strange cmd.exe access

[adam <eggroid () hotpop com>]

> I have been seeing similar odd cmd.exe packets as well.=20
>
> It looks like part of a Code Red or a new variant.
>
> Anyone else seeing the same?
>
> ----------------------------------------------------------------------------
> ----------------------------------------------------------------------------

I don't have the logs here at home, but I know I've seen this a couple 
of times.  We have ManHunt deployed, and it logs it as "Bad utf-8." 


----------------------------------------------------------------------------
----------------------------------------------------------------------------