Code Red 2 cleanup; reporting..

Fri Aug 10 04:09:44 UTC 2001

> FWIW, I just tried to telnet to the 20 most recent hosts I got Code Red II 
> probes from, and didn't get a shell prompt on any of them. Are people 
> cleaning up their boxes that quickly?

I have been told, but not personally conformed confirmed of non IIS
machines being infected with CodeRed (I or II not known, assume II).
Infection method: running an file from somewhere? They still scan out
and seek victims, just no webserver running.