Well It looks as if the Yahoo Corporate network is
infected.
hilla.corp.yahoo.com - [19/Sep/2001:11:22:10 -0500]
"GET /scripts/root.exe?/c+dir HTTP/1.0" 404 280 "-" "-"
If anyone from Yahoo is reading this list you might
want to start scanning systems.
---
Bill Larson
Network
Administrator
Compu-Net Enterprises