The web server is probably susceptible to a common IIS vulnerability discovered by 'Rain Forest Puppy'. This vulnerability enables an attacker to execute arbitrary commands on the server with Administrator Privileges. *** OVS solely relied on the presence of the file /msadc/msadcs.dll *** so this might be a false positive See Microsoft security bulletin (MS99-025) for patch information. Also, BUGTRAQ ID 529 on www.securityfocus.com ( http://www.securityfocus.com/bid/529 )