Re: [cobalt-security] Re: Unix worm to kill codered.

["Jamie Martino" <webmaster2@xxxxxxx>]

> There is a program that does it already, it's called winnuke! Codered.a
and
> Codered.b do not save anything to disk so all you need to do is reboot the
> machine!

Code Red v2 does write info to disk to install it's back door...
Or at least moves files around the hard drive to make the back door, and
even a reboot
won't clean your system completely..  It also writes to the registry so the
back door is opened
everytime the machine boots..

-Jamie-
http://w-c.net
WebConnection.Net, Inc.
In a mad world, only the mad are sane...