Strange URLs being logged in Customer Online Report

I am getting a lot of strange non existent URLs being listed in my customer online report.
My client is getting worried her site is being hacked.

The latest one is [domain]/smailfiles/ae/Virus/8/VideoPLAYER.exe

I have checked the server and this directory string doesnt exist.

Anyone any idea whats going on.

Thanks
Chris

The only way to 'remove' such 'callers' is to either 'block' or 'reroute' such visitors by .htaccess, I regularely check my Server Logs for such entries. Doing this, my .htaccess file has reached a size of about 1800 single lines. I had a lot of people trying to misuse my Contact-Forms as well, trying to add porn-links and/or Viagra/Cialis related postings. I have them all locked out as well.

If you need to know more about how to create such a file, let me know...

Ernie