Code Red III hits

[tepo]

YES I KNOW !

My ISP woke me up one morning, "Could You please logoff from net and clean Your machine, Your bombing our network..."

Took me few hours to clean server and verify the safety. Patches ? They were in. Firewall ? Running. Registry monitor would have saved me, didn't have it. ( Now I have... )

Well, we learn something everyday...

Tepo

[BBA]

I patched mine over a month ago...and it's still applied, I made sure.

BTW: the patch can not be applied to anything higher than build 2195, so XP is either out of luck or has it included with RC2 already.

I wonder how I can tell?

BTW: Tepo...repairing the registry will not fix it...nor will monitoring the registry stop it. If you had it, you have to reformat and rebuild the OS. No other choices will clean it.

Readd all the details here: http://www.incidents.org/react/code_redII.php

[socalgal]

You can download a free and easy-to-use vulnerability and detection tool from Symantec.

CodeRed I & II .

Read instructions before using.



[This message has been edited by socalgal (edited 08-12-2001).]

[tepo]

&%"#¤%&/!#&%¤ !!!!!!!!!!

Thankz BBA.

Goddamn, I re-installed the freakin server just two weeks ago...

Tepo, pissed.

[VERT]

Arrrrgh, go away code red, please

[CoNeSsIuS]

I guess this means we all need to pull our computers from the internet for about a week. During that time reload everything we got. Boy wouldn't that be a mess!


CoNeSsIuS

[DaHazeMan]

No internet for a week?
GASP
That means no Sysopt!
What would I do at work???