<< Must thank whoever created this worm!
Need to make people realize just how crappy a NT based web server is. >>
After you thank the guy.. .gimme his info so i can kill him!
For the last day or two, cable modems everywhere have been under "activity siege" with activity lights blinking. Its not affecting performance or anything, just a ton of port 80 probes and a bunch of ARP requests causing constantly flashing activity lights. Well, everyone knows how paranoid basic internet computer users are... so where I work.. we've been inundated with phonecalls wanting to know what's going on. 
What people don't know about this virus is it sends out TCP SYN probes across the local subnet looking for active machines on port 80. What happens when a TCP SYN to port 80 is sent to a machine that is offline (and therefore not in the ARP table)? A broadcast ARP. That's why the lights are flashing. 
I cannot WAIT until this code red stuff is over! My firewall alone has recorded a few hundred port 80 probes.