[Zope] Zope crash - Microsoft URL Control

Oliver Bleutgen myzope@gmx.net
Wed, 08 Jan 2003 17:04:03 +0100


Jaroslav Lukesh wrote:
> Hi,
> 
> My Zope server 2.5.1 (Win32) was crashed and was 3 days out after receive
> following hit:
> 
> 192.168.1.200 - Anonymous [31/Dec/2002:06:42:56 +0200] "GET / HTTP/1.1" 200
> 1584 "" "Microsoft URL Control - 6.00.8169"
> 
> (IP address is from our POUND proxy)
> 
> Microsoft URL Control is known as something about spam agent/worm/virus for
> FormMail.pl (as say googled search).
> 
> I dont know exactly time whem my zope fails, but after that log message was
> nothing until I was restart Zope service.
> 
> It is security issue or it is another reason?

Can't help you with your zope, but most of what you find on google about 
that client string is pure bullshit. This string is (was?) sent by some 
microsoft control (in the meaning of activex _control_) which can be 
used implement ftp and http transfers.

So the RIAA, Spammers or people with do-it-yourself-crawlers which are 
all said to cause this string have just one thing in common: they 
probably paid too much money for some trivial VB tool which aids them in 
their ... uuhm ... work.


cheers,
oliver