----- Original Message ---- > From: Anne Wilson <cannewilson at googlemail.com> > On Wednesday 03 June 2009 06:09:37 John R. Dennison wrote: > > He's running an apache instance on cent5. He has processes he > > can not readily identify running under apache named "atack"; > > where does "windows" come into the equation? > > Several of the links returned by google have the following info: > > IIS WebDAV Exploit, I think one of the agobot worms tries to use it to get > into Windows boxes. > > Anne Anne, i m running apache on a centos box. is centos still susceptible?