Microsoft issues advice about critical vulnerability

Apply your patches and update your AV software.

Microsoft has issued advice on what you should know about Download.Ject

The Trojan downloader, also known as JS/Scob.A and Toofer, affects websites running Microsoft IIS 5.0 and has been found appended to files on those web servers. When executed, the Trojan attempts to connect to a page on a remote website - which, currently, is not available.

• Read Microsoft's advice on what you should know about Download.Ject
• Read F-Secure's analysis: Scob
• Read Sophos's writeup: JS/Scob.A
• Read Symantec's analysis: JS.Scob.Trojan

Posted on 25 June 2004 by Virus Bulletin.