Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Code Red Attack.
Name: Jag Date: August 24, 2001 at 07:14:39 Pacific
Comment:
I have a HP8756C with a dual boot ME and win2k server. Yesterday my computer was infected with code red. then i downloaded a utility called coderedremover and run it without installing windows 2000 patch 2. And the computer rebooted and it started saying corrupt NTOSKERNEL. and i am not able to log on to my comp using windows2000. So any help regarding this is welcome.
Name: Lucid Date: August 24, 2001 at 08:45:10 Pacific
Reply:
Sounds like you might try the Repair Console off the CD or else you might have to reinstall the OS and let it rebuild the kernal file......
0
Response Number 2
Name: Pedro Date: August 24, 2001 at 09:42:54 Pacific
Reply:
From what I understand, removing CodeRed v1 is as simple as rebooting the computer. v2, however, is much harder to get rid of (ie next to impossible.)
0
Response Number 3
Name: Madog Date: August 25, 2001 at 12:49:15 Pacific
Reply:
My advice is the next time you hear the media hyping a virus for weeks, make sure you are patched. The code red patch is very small.
No, rebooting your computer does not delete it.
You can also try copying the ntoskernel off the CD, 2000 does not build a kernal as UNIX does.
0
Response Number 4
Name: SkyHawkTech Date: August 25, 2001 at 19:16:37 Pacific
Reply:
All Windows 2000 Versions, Pro, Server, ADV Server, etc.. need patched for the code red virus... ABSOLUTLEY NO EXCEPTIONS... http://www.microsoft.com/technet/treeview/default.asp?url=/technet/itsolutions/security/topics/codered.asp?frame=true&hidetoc=true
Summary: I have applied all of the recommended microsoft patches (i think) to guard my IIS 5.0 server against Code Red. Namely, Q300972, Q301625, and Q302755. However, as soon as I start the server, I receive...
Summary: My web server was crippled by code red, and now I can't broadcast on port 80. The msft program says I need to reinstall the system, is there any way around that? ...
Summary: If you are infected with the code red there are some files that need to be deleted before you reboot your machine or the worm will be reinstated into your memory again. Removal instructions can be f...
0 
