Wikipedia
Trinoo
The trinoo or trin00 is a set of computer programs to conduct a DDoS attack. It is believed that trinoo networks have been set up on thousands of systems on the Internet that have been compromised by remote buffer overrun exploits.
The first suspected trinoo attacks are described in CERT Incident Note 99-04. A trinoo network has been connected to the February 2000 distributed denial of service attack on the Yahoo! website.
Trinoo is famous for allowing attackers to leave a message in a folder called cry_baby. The file is self replicating and is modified on a regular basis as long as port 80 is active.