There is some common exploit on php apps that is really being attacked on win26, it has rebooted again and we are checking it now as well as the storage for CL2 CF1 and CF2