Public attack code aimed at Windows Web servers works, says Symantec