It's a worm: http://www.cert.org/advisories/CA-2001-11.html http://www.attrition.org/security/commentary/worm01.html >"They" have been trying damn hard to hack my IIS box with this in recent >days - maybe a hacker newsletter has dug up this old monster *yet* again, >and it's doing the rounds... > >------------------- >Mike Hardaker >Founder & Publisher >AngloINFO >www.angloinfo.com (Web) >wap.angloinfo.com (WAP) -- - Erik Mattheis "Everything's better" http://gozz.com/ (612) 827 3963