[Xitami] "default.ida?"

[Brian {Hamilton Kelly}]

In message <3B6ED6CD.8CB0A896@rci.rutgers.edu> Paul Reid writes:

> The newest mutant of CodeRed has a better number generator that is
> biased towards IP numbers in the same range as the machine it is on. 

And a much more lethal payload which requires the owner of the
Microsoft-based system to reformat the hard disk and re-install, because
it leaves a nasty infection in many parts of both NT4 and Win2K.

Beware, anyone running Win2K!  Apparently if one performs a custom
install, IIS is not pre-selected for installation; but those that chose a
default install end up with a running copy of IIS.  It is many of these
systems that are getting infected at this time, which were running a web
server unbeknownst to their owners.

Of course, anyone running Xitami on port 80 will already have disabled
IIS, but some may be running both, on different ports.

-- 
Brian {Hamilton Kelly}                                          bhk@dsl.co.uk
    "We have gone from a world of concentrated knowledge and wisdom to one of
    distributed ignorance.  And we know and understand less while being incr-
    easingly capable."              Prof. Peter Cochrane, formerly of BT Labs