CMD.EXE in my log files

[TRACEYR]

Hi there i have this in my logfiles
~/c/winnt/system32/cmd.exe 404 123 604 80 0 80 HTTP/1.0 - - -

so i added IIS LOCKDOWN AND URL SCAN to my server and now get this

GET /<Rejected-By-UrlScan> ~/scripts/root.exe 404 123 604 72 281 80 HTTP/1.0 - - -
GET /<Rejected-By-UrlScan> ~/MSADC/root.exe 404 123 604 70 0 80 HTTP/1.0 - - -
GET /<Rejected-By-UrlScan> ~/c/winnt/system32/cmd.exe 404 123 604 80 0 80 HTTP

So i know the tools are working....is there something in my server doing this now.........can i remove this......i did a virus checker but how can i stop this message..

Any help would be appreciated.

[bobriggs]

Nimda

Do a site search [searchengineworld.com] for Nimda.

Nothing you can do about it.

But you should make sure that you have the security updates and that you're not infected:
[symantec.com...]

[EDIT]
Oops! Sorry methinks now that's Code Red. Both were just cranking up around the same time last year. Try this:
[webmasterworld.com...]