Hits Sessions Bytes sent | URL
--------------------------------------------------------------------------------------------------
95 0 22040 | /scripts/..%5c../winnt/system32/cmd.exe
58 54 12180 | /scripts/root.exe
55 0 11440 | /MSADC/root.exe
53 0 11554 | /c/winnt/system32/cmd.exe
52 5 12072 | /scripts/..^ ^ï../winnt/system32/cmd.exe
51 0 11118 | /d/winnt/system32/cmd.exe
50 0 12450 | /_vti_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
49 0 12201 | /_mem_bin/..%5c../..%5c../..%5c../winnt/system32/cmd.exe
49 0 11319 | /scripts/..^^\../winnt/system32/cmd.exe
48 0 12720 | /msadc/..%5c../..%5c../..%5c/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
47 0 10857 | /scripts/..^ /../winnt/system32/cmd.exe
47 0 10857 | /scripts/..^^Ü../winnt/system32/cmd.exe
44 0 10208 | /scripts/..%2f../winnt/system32/cmd.exe
8 8 0 | /scripts/..%5c%5c../winnt/system32/cmd.exe
4 0 984 | /scripts/.%2e/.%2e/winnt/system32/cmd.exe
2 0 440 | /www2/index.htm
2 1 424 | /go.php
2 0 420 | /www2
1 0 214 | /Rebecca/
1 0 232 | /_vti_bin/..^^ß../winnt/system32/cmd.exe
1 1 204 | /robots.txt
1 0 245 | /scripts/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
1 0 244 | /script/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
1 0 243 | /msadc/..^^Ü../..^^Ü../..^^Ü../winnt/system32/cmd.exe
1 0 243 | /msadc/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
1 0 246 | /exchange/..^^Ü../..^^Ü../..^^Ü../winnt/system32/cmd.exe
1 0 246 | /exchange/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
1 0 246 | /_vti_bin/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
1 0 246 | /_mem_bin/..^^\../..^^\../..^^\../winnt/system32/cmd.exe
1 0 231 | /scripts/..^^ß../winnt/system32/cmd.exe
1 0 229 | /msadc/..^^ß../winnt/system32/cmd.exe
1 0 237 | /Rebecca/WTDworkingintroABSTRACT
1 0 243 | /scripts/..^ ^ï..^ ^ï..^ ^ï..^ ^ï../winnt/system32/cmd.exe
1 0 243 | /scripts/..^ /..^ /..^ /..^ /../winnt/system32/cmd.exe
1 0 237 | /msadc/..^ ^ï..^ ^ï..^ ^ï../winnt/system32/cmd.exe
1 0 237 | /msadc/..^ /..^ /..^ /../winnt/system32/cmd.exe
1 0 232 | /_vti_bin/..^ ^ï../winnt/system32/cmd.exe
1 0 240 | /_vti_bin/..^ ^ï..^ ^ï..^ ^ï../winnt/system32/cmd.exe
1 0 232 | /_vti_bin/..^ /../winnt/system32/cmd.exe
1 0 240 | /_vti_bin/..^ /..^ /..^ /../winnt/system32/cmd.exe
1 0 240 | /_mem_bin/..^ ^ï..^ ^ï..^ ^ï../winnt/system32/cmd.exe
1 0 240 | /_mem_bin/..^ /..^ /..^ /../winnt/system32/cmd.exe
1 0 241 | /Rebecca/WTDworkingintroABSTRACT.gif
1 0 245 | /scripts/..^^ß../..^^ß../..^^ß../winnt/system32/cmd.exe
1 0 244 | /script/..^^ß../..^^ß../..^^ß../winnt/system32/cmd.exe
1 0 243 | /msadc/..^^ß../..^^ß../..^^ß../winnt/system32/cmd.exe
1 0 246 | /_vti_bin/..^^ß../..^^ß../..^^ß../winnt/system32/cmd.exe
1 0 246 | /_mem_bin/..^^ß../..^^ß../..^^ß../winnt/system32/cmd.exe
1 0 229 | /msadc/..^ ^ï../winnt/system32/cmd.exe
1 0 229 | /msadc/..^ /../winnt/system32/cmd.exe
1 0 211 | /exchange/root.exe
1 0 202 | /NULL.ida
1 0 202 | /NULL.idq
1 0 232 | /_vti_bin/..^^\../winnt/system32/cmd.exe
1 0 243 | /scripts/..^^Ü..^^Ü..^^Ü..^^Ü../winnt/system32/cmd.exe
1 0 243 | /scripts/..^^\..^^\..^^\..^^\../winnt/system32/cmd.exe
1 0 237 | /msadc/..^^Ü..^^Ü..^^Ü../winnt/system32/cmd.exe
1 0 237 | /msadc/..^^\..^^\..^^\../winnt/system32/cmd.exe
1 0 240 | /_vti_bin/..^^Ü..^^Ü..^^Ü../winnt/system32/cmd.exe
1 0 240 | /_vti_bin/..^^\..^^\..^^\../winnt/system32/cmd.exe
1 0 240 | /_mem_bin/..^^Ü..^^Ü..^^Ü../winnt/system32/cmd.exe
1 0 240 | /_mem_bin/..^^\..^^\..^^\../winnt/system32/cmd.exe
1 0 245 | /scripts/..^ ^ï../..^ ^ï../..^ ^ï../winnt/system32/cmd.exe
1 0 245 | /scripts/..^ /../..^ /../..^ /../winnt/system32/cmd.exe
1 0 244 | /script/..^ ^ï../..^ ^ï../..^ ^ï../winnt/system32/cmd.exe
1 0 244 | /script/..^ /../..^ /../..^ /../winnt/system32/cmd.exe
1 0 243 | /msadc/..^ ^ï../..^ ^ï../..^ ^ï../winnt/system32/cmd.exe
1 0 243 | /msadc/..^ /../..^ /../..^ /../winnt/system32/cmd.exe
1 0 246 | /exchange/..^ ^ï../..^ ^ï../..^ ^ï../winnt/system32/cmd.exe
1 0 246 | /exchange/..^ /../..^ /../..^ /../winnt/system32/cmd.exe
1 0 246 | /_vti_bin/..^ ^ï../..^ ^ï../..^ ^ï../winnt/system32/cmd.exe
1 0 246 | /_vti_bin/..^ /../..^ /../..^ /../winnt/system32/cmd.exe
1 0 246 | /_mem_bin/..^ ^ï../..^ ^ï../..^ ^ï../winnt/system32/cmd.exe
1 0 246 | /_mem_bin/..^ /../..^ /../..^ /../winnt/system32/cmd.exe
1 0 213 | /rebecca
1 0 229 | /msadc/..^^\../winnt/system32/cmd.exe
1 1 214 | /galaxy_748308.748654
1 0 218 | /NULL.printer
1 0 209 | /script/root.exe
--------------------------------------------------------------------------------------------------
777 70 177687
==================================================================================================