I can't find a definitive explanation... so I am seeking input here. If one sees a web server request for /_vti_bin or /MSOffice, is that normal behavior of IE clients or is it indicative of malicious activity? Thx, -Jim P.