(Not entirely on the subject, since I am unfamiliar with your webserver, but.. might be useful to others reading this thread)

For IIS get URLScan (which you should be running anyhow) from:
...