RE: Code Red Got me - one more quick thing

[Jerry Kennedy]

If using IIS 4.0, be sure you aren't using the native HTTP redirects.  The
malformed URLs sent by Code Red probes causes Web services to shut down
when implementing this configuration even if your server is not infected. 
Eeye's tool does not detect this as a security hole.
If you're using these redirects, convert them to page redirects.

http://www.sunbelt-software.com/ntsysadmin_list_charter.htm