Security Incidents mailing list archives
tamersahin.net Code Red Cleaner v1.0
From: "Tamer Sahin" <feedback () tamersahin net>
Date: Tue, 14 Aug 2001 12:24:04 +0300
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Code Red Cleaner first try to detect if Code Red Worm is active in memory and report it. After that if worm is discovered it finds files of worm on the disk and clean-all them. It stops the IIS, removes the execute permission of some directories on registry and if sp2 is installed it applies the appropriate patches. It detects Code Red I,II,III versions and clean up them. Download: http://www.tamersahin.net/downloads/cr.zip Tamer Sahin, feedback () tamersahin net PGP Key ID: 0x51CF215C Fingerprint: 3CEC A96A 11E5 1288 2640 247A 6551 0809 51CF 215C http://www.tamersahin.net -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 6.5.3 for non-commercial use <http://www.pgp.com> iQA/AwUBO3jSFGVRCAlRzyFcEQLQFwCfS1Oj6UmsJvrbvmhf2GVAZoQdhhsAnA45 m0kkU+gf3UOvqvcxZ/52pJat =QRYv -----END PGP SIGNATURE----- ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- tamersahin.net Code Red Cleaner v1.0 Tamer Sahin (Aug 14)
- <Possible follow-ups>
- Re: tamersahin.net Code Red Cleaner v1.0 Tamer Sahin (Aug 14)