Would it work to write a program that listens for the default.ida request
and then sends back a patch through the hole to IIS on the machine with the
virus?  It wouldn't be a virus because it would not spread (it would not
send itself, only the patch).  It's legality shouldn't be a problem because
you are only protecting your computer and not harming the other computer.
It could also try to email webmaster at the machine.

     o o o o o o o . . .  __________________________ ______=======_||___
   o      _____           |  James A. N. Stauffer  | |    JStauffer@   |
 .][__n_n_|DD[  ====____  | Spam food: uce at ftc.gov | | SPSCommerce.com |
>(________|__|_[________]_|________________________|_|_________________|
_/oo OOOOO oo`  ooo  ooo  'o¬o¬o              o¬o¬o` 'o¬o           o¬o`
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20010807/42e36a34/attachment.htm