June 29, 2004 08:29 PM

The Download.Ject Trojan and the MS04-011 Patch

Rating: (0)
Windows IT Pro
InstantDoc ID #43121
The airwaves are full of the latest hacker exploit, known as Download.Ject, JS.Scob.Trojan, and several other names. This Trojan horse plants a script on unsuspecting Microsoft Internet Information Services (IIS) 5.0 Web sites that, when executed by Windows XP and Windows 2000 systems, redirects the browser to a Web site that purportedly (according to the lay press) might scavenge the local system for personal information including credit card numbers. According to Symantec, on an IIS server,...

ARTICLE TOOLS

You must be a paid Professional Member to access this entire article.

Already a Professional Member? Please log in now:

NOT A PROFESSIONAL MEMBER? YOU CHOOSE:

Monthly or Annual

Professional Membership

VIP Membership

Compare Member Benefits

Add a Comment

I cannot find a specific virus, but about a week ago, I am unable to process Java script on IE forms. Example. Using Hotmail, click the up or down arrow or INBOX symbols to advance or change screens. The JAVA lable displays on the browser, but nothing happens. I am forced to close IE and reopen. Any ideas? I have tried to reload IE and use different pop-up blockers. That is another issue, since this started, the MSN Pop-Up blocker stopped working. Not a complicated setup, but this is very annoying.

Kevin Greeley 7/4/2004 10:29:49 AM


Pervasive hacks like this would be preventable if the OS/Browser protected the .bak and overwrite of critical Windows files, or if there were any instance of malicious code that propogated to one's local machine (the OS should be able to efficiently process a hash computation (like the SHA-1), and flush the code before it invades the machine. Another parallel process would be able to detect and isolate or block executable code before it's written to someone's unsuspecting hard drive.

Ed Dalbey 6/30/2004 12:33:00 PM


EXCELLENT.

Nicolas Mendoza 6/29/2004 8:02:05 PM


Is this a security patch or a hacker enhancement? I have to wonder how many other software packages will be affected in which there is not a "workaround" available. In a rush to fix something, a patch should not break everything else! This is certainly not a patch that I would expect a normal user to install. I wonder how many hours of overhead network time this will end up costing me?

Craig Earon 6/29/2004 12:53:46 PM


You must log on before posting a comment.

Are you a new visitor? Register Here
Free Power Tools Brochure
Get Mark Minasi's 17-page guide today!



      

advertisement

GOOGLE LINKS
SPONSORED LINKS
FEATURED LINKS

White Papers

Your remote offices contain valuable electronic data – are they adequately protected? Learn how proven technologies can reliably and cost-effectively back up a branch office from a central location, in real time, to disk or tape, and even utilize existing backup solutions.

Downloads

PacketTrap IT is a comprehensive and affordable network management and application monitoring solution that solves problems associated with bandwidth, network and application performance, and connectivity. Gain insight into your network - try PacketTrapIT free for 21 days!

Web Seminars

IT administrators have to solve a myriad of problems. This web seminar outlines the ten most common systems management pains - including managing highly distributed systems and dealing with data theft/loss – and the best practices to address each.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.