Case Study:  Code Green6
•Code Released 9/1/2001 Written by Der HexXer
•Code Red Response: Scans, Disinfects, Patches
•
•Scans for systems infected with CodeRed
•Exploits ISAPI vuln on infected systems
•Removes CodeRed from system
•Installs Q300972 Hotfix on system
•Installs itself on system
•
•
–
–