Does Xitami show the complete Code Red request in the ACCESS.LOG made by infected systems? And if so, is that the full extent of the worm? -- John