[KLUG Members] weird web stuff

[Adam Tauno Williams]

>They (read somebody) are trying to hack you with the .ida worm.....

What is an .ida extension?

>It's aimed at IIS servers on NT4+. It loads on the server then create
>100 instances of itself. The first 99 go searching for more victims, the
>100th defaces the webpage.

Oh, bummer..... :)

>>From what I have read, it ONLY affects IIS / NT systems. This thing hit
>>5400 systems in one day and the last numbers I can remember show over
>>100,000 systems affected in a week!

Is this like a buffer overflow thing? (accounting for the long param string,
perhaps).

>I just had to call one of my customers as they just got hacked by it
>also!

Systems and Network Administrator
Morrison Industries
1825 Monroe Ave NW.
Grand Rapids, MI. 49505