On Mon, Aug 06, 2001 at 12:15:22PM -0500, gmcdavid at winternet.com wrote: > Does this mean all of these cable users are running NT (or 2000) with IIS? Yes, assuming the addresses aren't spoofed. (And spoofing doesn't seem likely, since a connection has to be established to send the worm over.) > And why would they be running IIS? Bundling. Everything in Windows is "web-enabled" now and, according to what I've heard on lists, the installer assumes that if you want any web-enabled software, you'll also want your own web server. Most of them probably don't even know they're running it. -- With the arrest of Dimitry Sklyarov it has become apparent that it is not safe for non US software engineers to visit the United States. - Alan Cox "To prevent unauthorized reading..." - Adobe eBook reader license