Microsoft issues advice about critical vulnerability

Apply your patches and update your AV software.

Microsoft has issued advice on

what you should know about Download.Ject

The Trojan downloader, also known as JS/Scob.A and Toofer, affects websites running Microsoft IIS 5.0 and has been found appended to files on those web servers. When executed, the Trojan attempts to connect to a page on a remote website – which, currently, is not available.

• Read Microsoft’s advice on
  
  what you should know about Download.Ject
  

• Read F-Secure’s analysis:
  
  Scob
  

• Read Sophos’s writeup:
  
  JS/Scob.A
  

• Read Symantec’s analysis:
  
  JS.Scob.Trojan
  

Posted on 25 June 2004 by

Virus Bulletin