Improving Web Application Security: Threats and Countermeasures

You remove URLScan manually by using the ISAPI filters page of the Web server properties dialog in Internet Services Manager