Vick Vega's questions

I have a CF 9 installed on Windows 2008 R2 with IIS. The server has several IPs. I have created and new site in IIS and adjusted the binding on it to listen on IP other than where CF is configured. Have installed PHP and trying to browse to the simple php info file located at that site. However in the IIS logs I see that CF somehow treats it a "redirection" and shows the following in the logs: ( a simple html with "hello" loads properly)

x.x.x.x is the IP to which the site is bind.

y.y.y.y is the IP that I'm coming from.

2013-04-16 00:47:02 x.x.x.x GET /test.txt - 80 - y.y.y.y Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+WOW64;+Trident/6.0) 304 0 0 265 2013-04-16 00:47:08 x.x.x.x GET /main.cfm redirectionNom=info.php 80 - y.y.y.y Mozilla/5.0+(compatible;+MSIE+10.0;+Windows+NT+6.1;+WOW64;+Trident/6.0) 404 0 0 156

As you can see:

GET /main.cfm redirectionNom=info.php

is perhaps causing the issue. Where should I check to try to eliminate that strange behavior?

Thanks.

Possible Duplicate:
Tracking who installed Software on server.

Hello, I'm trying to figure out a way, on how to find who (username) installed specific program, which appears in the "Add/Remove Programs" of the Windows 2003 server. Is there a way to do it?

Edit: There is no event logs available to check through, what I'm looking for is a similar behavior as:

wmic qfe

Which lists the user, that installed the patch. Not always, since some patches appear as installed by the system, however still for manually installed patches, there are indication for the username.