A successful shell attack was detected.
The results of a Windows directory listing command occurred in a TCP session normally used for a standard service. This may indicate a successful compromise of this service has occurred.
The command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.