[Xitami] CodeRed solution...

[Thomas J. Hruska]

At 09:31 AM 8/10/01 +0100, you wrote:
>On Fri, Aug 10, 2001 at 02:55:49AM -0500, Thomas J. Hruska wrote:
>> remove root.exe as well as reboot the machine when it's done).  Thus, we
>> can effectively remove CodeRed II on the remote server and patch IIS at the
>> same time...Microsoft never made fixes this simple :)
>
>I wouldn't know how to do any of this. 
>
>How about providing a sample?

No clue.  I just know that it is possible to do it...I'm not sure where
root.exe resides on the remote server.

The FTP command would probably look like:
fopen("http://$REMOTE_HOST/somepathtoroot_exe/root.exe+some+command+to+ftp",
 "r");

Beyond that starting point, I don't have time to develop such a script.  I
also have to learn how to do VB scripting (a .VBS executable file is the
macro script I was referring to).

BTW, I'm averaging 17-18 CodeRed II requests/hr.  That makes for around 400
requests/day on my measly little website.  I _almost_ get more CodeRed
requests than normal visitor requests per day!


           Thomas J. Hruska -- shinelight@crosswinds.net
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/