Set an environment variable.
RewriteRule (root|cmd)\.exe - [E=worm:nimda]
The more verbose \[env\] format is also permitted.