Security

Ask something
Discussion Locked

Code Red

0 helpful
4 replies

by mert gülsoy (mgulsoy 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I learned that there are 4 variants of code red worm and somebody say code red can't be removed forever. Our network has been affected from this worm. And I'm working so hard to defeate this worm. I know some ways but I think that I must know much. Please help me to defeat. If you know some ways please reply...

4 replies

by rodvaughan

You don't say what OS your server is running? If it's Windows based go to the Microsoft Site and download the fix patch for the virus you may have to download it to a stand alone machine but it's worth a try. If it's Novell or Unix try their sites.

by irwin

I am still steady getting hit by the worm. Is everybody else still getting hit by the worm. My logs are starting to get to be to much.

Something has to be done with that worm!

by mert gülsoy (mgulsoy

if you are using iis 5 or 4, open the iis manager snap-in go to the scripts folder\properties and disable the script executing. Use the win2000 network monitor to capture the packets that the worm sends and receive. Get the destination and source adresses. The adresses means that the machines that belongs to that adresses attacking or the packets captured are worms threads. ok. Go to the symantech's site and microsoft site. download the patch and removal tool. after all capture packets again and analyse. Packet data contains the word "root.exe"..

This discussion is closed to new replies.