satori:/var/log/apache# egrep '(scripts|cmd.exe|root.exe)' access.log | wc -l
  10195

That's just over a thousand hits per hour from the latest Windows NT / IIS worm. Bloody incompetent NT admins. Grrr.