[40499] in North American Network Operators' Group
Re: Code Red 2 cleanup; reporting..
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Fri Aug 10 10:52:08 2001
Message-Id: <200108101451.f7AEpZB13797@foo-bar-baz.cc.vt.edu>
To: Nanog <nanog@merit.edu>
In-Reply-To: Your message of "Fri, 10 Aug 2001 02:11:21 PDT."
<3B73A539.ADFBEF82@deaddrop.org>
From: Valdis.Kletnieks@vt.edu
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_-1075139048P";
micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Fri, 10 Aug 2001 10:51:34 -0400
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_-1075139048P
Content-Type: text/plain; charset=us-ascii
On Fri, 10 Aug 2001 02:11:21 PDT, Etaoin Shrdlu <shrdlu@deaddrop.org> said:
> It started a service at port 80 for him (lucky guy), but he had definitely
> not started IIS. In fact, it had that stupid default page up that I've
> usually seen in past when some application is installed the "personal web
> server" for an unsuspecting user. I'm a little tired, and suspect that I no
Aha.
I have been told that the *most* common reason for finding IIS on
a non-server install of NT or W2K is that although IIS is *NOT* installed
by default on non-server boxes, it *IS* installed if you are upgrading
and it finds traces of 'Personal Web Server'.
Would that explain what you're seeing?
--
Valdis Kletnieks
Operating Systems Analyst
Virginia Tech
--==_Exmh_-1075139048P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Exmh version 2.5 07/09/2001
iQA/AwUBO3P09nAt5Vm009ewEQITTQCg/eTd3LQ2CEnzC8KypfQkQTlPXsYAoJrq
sMezGfOafHHlJVBkpv/GxkYn
=oXen
-----END PGP SIGNATURE-----
--==_Exmh_-1075139048P--
