Have you seen curious requests for "/default.ida?NNN..." (or the
variant with "XXX" padding instead of "NNN") in your website access
logs? Well congrats! That probably means some IIS webservers
infected with the "red alert" virus tried to infect your website.
Think of it as the computer equivalent of receiving a big, sloppy, and
unsolicited kiss from some random drunk staggering around a bar stoned
out of his/her mind. Also imagine that the drunk is only tempted by
people he/she thinks are named "Bill" for some reason? Probably some
awful memory about an tortured childhood... So pucker up(!) if you
are running Windows/IIS 'cause that drunk radar sees a big blinking
B-I-L-L on your forehead! People named Apache or UNIX can continue to
drink quietly without worrying too much. But they still may want to
watch out for all the drunks writhing on the floor unable to stand on
the way out. If enough of them litter the place, it might be hard to
get out the door!
|