More info: http://isc.sans.edu/diary.html?storyid=8935

Verify your IIS website, and if you are maintaining the server, verify you're up-to-date with patches.