Code Red Worm Description
Code Red (CodeRed) is a computer worm that affected MS ISS web servers back in the early 2000s. At the peak of its popularity, it affected nearly half a million host systems.
Code Red uses a simple but effective vulnerability of older ISS web servers. the worm causes a buffer overflow by using a particularly long string of symbols, the netter N in this case, to overflow the software buffer. This, in turn, allows the malware to execute the arbitrary code it needs and spread further, while defacing the host in the process.
Servers who were infected by the Code Red worm had their pages replaced with the following text:
HELLO! Welcome to http://www dot worm dot com! Hacked By Chinese!
The worm was also set up in a way which allowed it to perform different tasks depending on the day of the month, obtained from the victim's system clock. On the first 19 days of each month, Code Red would try to propagate itself to new systems, searching for more ISS servers online. During the days between the 20th and the 27th, the worm would launch DoS attacks on a number of predetermined web servers, including that of the White House. On the last few days of each month, Code Red would do nothing.
A short while after Code Red was first spotted and figured out, a second version appeared, with different strings of instructions in its payload and with a long string of X symbols instead of N ones to trigger the buffer overflow.
Do You Suspect Your PC May Be Infected with Code Red Worm & Other Threats? Scan Your PC with SpyHunterSpyHunter is a powerful malware remediation and protection tool designed to help provide PC users with in-depth system security analysis, detection and removal of a wide range of threats like Code Red Worm as well as a one-on-one tech support service. Download SpyHunter's FREE Malware Remover
Security Doesn't Let You Download SpyHunter or Access the Internet?Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
- Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
- Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
- Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in "Safe Mode with Networking" and install SpyHunter in Safe Mode.
- IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.