A successful shell attack was detected.
The results of an unsuccessful attempt to change drives on a Windows machine occurred in a TCP session normally used for a standard service. This may indicate a successful compromise of this service has occurred.
The command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.