>I recently noticed my default.asp file was overwritten by a hacker.
>
>The hacker wrote 4 files to each of my web root directories. The files are 1K in size and contain the phrase "F*CK USA GOVERNMENT." The 4 files are: default.asp, default.htm, index.asp, index.htm.
>
>Anyone know how they did this so I can close the hole in the server?
>
>Thanks in advance....
>
>Michael


There was a security flaw discovered May 1st. Check this MS site often:
http://www.microsoft.com/technet/security/current.asp

Look for Microsoft Security Bulletin MS01-023.