Ah! That explains it, then... > It's a worm: > > http://www.cert.org/advisories/CA-2001-11.html > http://www.attrition.org/security/commentary/worm01.html > > >"They" have been trying damn hard to hack my IIS box with this in recent > >days - maybe a hacker newsletter has dug up this old monster *yet* again, > >and it's doing the rounds... ------------------- Mike Hardaker Founder & Publisher AngloINFO www.angloinfo.com (Web) wap.angloinfo.com (WAP)