Spy Ware secretly gathers sensitive details—for instance passwords or banking account details—and transmits it back again for the attacker. php enabled IIS will try and provide the directory listing, which is generally disabled too. In that situation Despite having anon access you will get the 403 forbidden webpage. It's a http://pigpgs.com