SetEnvIf Request_URI "winnt/system32/cmd\.exe" worm
# etc ...
CustomLog "|exec sh" "/sbin/route -nq add -host %a 127.0.0.1 -blackhole" env=worm