On Mon, Aug 06, 2001 at 12:15:22PM -0500, gmcdavid at winternet.com wrote:
> Does this mean all of these cable users are running NT (or 2000) with IIS?

Yes, assuming the addresses aren't spoofed.  (And spoofing doesn't seem
likely, since a connection has to be established to send the worm over.)

> And why would they be running IIS?

Bundling.  Everything in Windows is "web-enabled" now and, according to
what I've heard on lists, the installer assumes that if you want any
web-enabled software, you'll also want your own web server.  Most of them
probably don't even know they're running it.

-- 
With the arrest of Dimitry Sklyarov it has become apparent that it is not
safe for non US software engineers to visit the United States. - Alan Cox
"To prevent unauthorized reading..."         - Adobe eBook reader license