[Xitami] Another CodeRed solution...

[Thomas J. Hruska]

At 09:08 PM 8/10/01 -0700, you wrote:
>Code Red Vigilante:
>
> http://www.dynwebdev.com/codered/
>
>Basically it listens on port 80 (nothing else can be on port 80, of course,
>so it mean you can't run a web server with this too). When it detects a Code
>Red connection from an infected machine, it then uses the shell access of
>the infected computer to pop up a window on the infected computer's screen
>saying their computer is infected and giving info on how to get rid of the
>infection.
>
>Seems more constructive than some suggestions... :)

Yup.  Michael will still probably go off on some legal tangent.  However,
apparently 16,000 people have been notified using this method...so maybe it
works, maybe it doesn't.  Actually, the person shows the code used within
the Java-based program near the bottom of the page.  The net send command
won't work on 95/98(/ME?) machines, but will work on NT/2K with CR
II...which should be fine since those are the machines that are most likely
to still be infected.


           Thomas J. Hruska -- shinelight@crosswinds.net
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/