Monitors for Code Red activity. This app opens up a socket on port 80 and logs all machines making spurious calls to that port. Install on a machine on the network not normally used as a web-server, and leave. If you have Code Red inside your network, this should pick up which machines have it.