@CODEREDCHECK.CMD Command File Begins
@echo off
rem Alan Kaplan, MSD, Inc. for VISN6 8/8/2001
rem checks individual server for evidence of Code Red infection
rem www.akaplan.com

if "%1z" == "z" goto syntax

rem look for signs of infection on c,d and e drives

for %%t in (c,d,e) do  if exist  \\%1\%%t$\inetpub\scripts\root.exe goto infected
for %%t in (c,d,e) do  if exist  \\%1\%%t$\progra~1\common~1\system\MSADC\root.exe  goto infected
for %%t in (c,d,e) do  if exist  \\%1\%%t$\explorer.exe  goto infected
Echo \\%1 does not show signs of infection with Code Red 2
goto end

:infected
Echo %1 is infected with Code Red 2
goto end

:syntax
cls
echo Test for Code Red 2 infection
echo Syntax: %0 servername (do not use \\)

:end
pause

rem Command File Ends