Encyclopedia

RedCode.IIS.2

 
Threat LevelHigh threatDamageSevereDistributionNot widespread
Common name:RedCode.IIS.2
Technical name:W32/RedCode.IIS.2
Threat level:Medium
Alias:CodeRed.C, Code RedII, IIS-Worm.CodeRed.C, CodeRed.2, Bady.C
Type:Worm
Subtype: Trojan
Effects:  It blocks and restarts affected computers

Affected platforms:

Windows XP/2000/NT

Detection updated on:Sept. 18, 2003
StatisticsNo
Yes, using TruPrevent Technologies
Family:VALENTIN

Brief Description 

    

RedCode is a worm that spreads through computer networks and which affects MS Index Server 2.0, MS Indexing Service and MS Internet Information Server (versions 4.0 and 5.0).

The effects of RedCode are dangerous as it drops a Trojan in affected computers, which allows attackers to gain complete control of the Web servers in a network. It can also restart and block computers by flooding their memory.

Visible Symptoms 

    

An indication that you may have been infected by RedCode is computers restarting for no apparent reason

Last updated:  18/09/2003 

Virus News

3/10/09.-More than 10 Million Worldwide Were Actively Exposed to Identity Theft in 2008

3/5/09.-Cyber-crooks manipulate Internet searches to sell fake antivirus products

3/2/09.-VideoPlay adware infections grew 400% in February through malicious use of Web 2.0 pages

[+ Noticias]