Countermeasures
Patch your IIS servers!!!
- Download patch for NT or 2000 (there is none for XP)
- Disconnect your system from the network
- Reboot system
- Install patch
Unbind unneeded ISAPI file extensions (such as .ida, .idq, .htr, and .printer)
- Many file extensions are bound to a DLL
- When IIS receives a request for such a file, control passes to the DLL