roger_74,
Thx for the link - very informative. Here is the email I just got from my ISP with a little more information:
-------------------------------------------------
Dear Valued Customer,

Large portions of the Internet are suffering from a massive
denial-of-service type attack. It appears to be a worm,
attacking and infecting Microsoft SQL server.

While the worm directly attacks Microsoft SQL server, the level of
traffic being generated by the worm is so huge that large-scale portions
of the Internet are basically unusable.

We are monitoring the situation, but until Internet backbones and
ISP's everywhere have also all blocked these ports and identified
infected machines, serious performance degredation will continue.

We do not believe that any network elements under our control are
having performance problems, but are monitoring this on an ongoing
basis to ensure our own connections to the Internet remain uncongested.

At this time, we have blocked ports 1433 and 1434 both from entering and
from leaving our network. If you require outside access to these
ports to your SQL server, you will need to contact
xxxxxxxxxxxxxxxxxxxxx
for assistance.

If you are operating Microsoft SQL which is publicly accessible from
the Internet, you should immediately ensure that you have installed
all the latest security patches, and reboot your server. If your SQL
server is infected by this worm, and is thus attacking other Internet
hosts, our information indicates that a reboot *MAY* clear it up.
But be sure you install the latest patches, and if in doubt, take the
server offline.

More information as it becomes available.
-------------------------------------------------