This utility scans a class C or B network for hosts infected with the Code Red II worm. It does this by checking for the presence of /scripts/root.exe which is the backdoor Code Red II leaves behind.
9d7ac64116e321ee9ad184ad22c7d68ea6e8821fb7ce10daf672883ea8effbea