1.) Install URLScan v3.1

2.) Configure ISAPI filter for using the IIS internet Manager

	a.) In IIS Manager, expand the local computer, right-click the Web server or Web 
	site to  which you want to add a filter, and then click Properties.
 
	b.) Click the ISAPI Filters tab, and then click Add.

	c.) In the Filter name text box, type the name of the filter.
 
	d.) In the Executable text box, click Browse to navigate to %windir%\system32
	\inetsrv\urlscan

	e.) Select urlscan.dll. Folder:- %windir%\system32\inetsrv\urlscan



3.) Configure URLScan Settings in URLScan.ini file - %windir%\system32\inetsrv\urlscan\URLScan.ini

4.) ReStart the Webserver.


Check by sending a URL like

http://domain.com/news.asp?ID=67;

Just Putting a semicolon ID=; should result in a HTTP 404 page not found error