[THIN] Re: Virus Alert: Download.Ject

  • From: "PETERSON, DAVID" <DPETERSO@xxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 2 Jul 2004 09:28:00 -0400

I was just sent this KB article, it details how to set the killbit for the 
ActiveX control used. Not the best fix and I don't know why it took them so 
long to put this out.

http://support.microsoft.com/default.aspx?kbid=870669

-----Original Message-----
From: Steve Raffensberger [mailto:sraffens1@xxxxxxxxxxx]
Sent: Thursday, July 01, 2004 2:55 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Virus Alert: Download.Ject


LOL..."Unless recent critical updates are installed on your home PC
or your IIS Server it is vulnerable to this attack."

On WinXP, the "recent critical update" is SP2 RC2.

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Jim Kenzig http://thin.net
Sent: Thursday, July 01, 2004 2:12 PM
To: thin@xxxxxxxxxxxxx; windows2000@xxxxxxxxxxxxx;
brainstem@xxxxxxxxxxxxxxx
Subject: [THIN] Virus Alert: Download.Ject


Microsoft has issued a critical alert about the Download.Ject virus.  This
virus can be gotten simply by visiting an infected web site with noaction
from the user.  Unless recent critical updates are installed on your home PC
or your IIS Server it is vulnerable to this attack.
Jim Kenzig
http://thin.net

For information see:

http://www.microsoft.com/security/incident/download_ject.mspx

Actions for Home Users


1. Install Critical Updates http://windowsupdate.microsoft.com/

  Visit the Windows Update Web site to install all critical updates.

2. Check for Infection

  To determine if the malicious code is on your computer, search your system
for the following files:

Kk32.dll
Surf.dat

Steps for Windows XP users:

On the taskbar at the bottom of your screen, click Start, and then click
Search:

Under What do you want to search for? click All files and folders.
Under All or part of the file name:
type: Kk32.dll
and then click the Search button.
Under All or part of the file name:
type: Surf.dat
and then click the Search button.


If either of these files is present, your computer may be infected. You can
find tools to clean your computer and obtain up-to-date antivirus protection
from the following software vendors participating in the Microsoft Virus
Information Alliance:

Symantec
http://securityresponse.symantec.com/avcenter/venc/data/js.scob.trojan.html
F-Secure http://www.f-secure.com/v-descs/scob.shtml
Trend Micro
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=JS_JECT.A
Network Associates http://vil.nai.com/vil/content/v_101033.htm
Computer Associates
http://www3.ca.com/securityadvisor/virusinfo/virus.aspx?id=39438


3. Increase Your Browsing and E-Mail Safety

  Follow the steps outlined on the page to Increase Your Browsing and E-Mail
Safety.
http://www.microsoft.com/security/incident/settings.mspx
********************************************************
This weeks sponsor Emergent Online Thinssentials Utilities
Using the latest software, hardware, networking technologies, proven
technical expertise, proprietary software and best practices, EOL provides
custom-tailored solutions for each client's mission and specific goals.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

********************************************************
This weeks sponsor Emergent Online Thinssentials Utilities
Using the latest software, hardware, networking technologies, proven technical 
expertise, proprietary software and best practices, EOL provides 
custom-tailored solutions for each client's mission and specific goals.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm


NOTICE: This electronic mail transmission from the law firm of Dinsmore & Shohl 
may constitute an attorney-client communication that is privileged at law.  It 
is not intended for transmission to, or receipt by, any unauthorized persons. 
If you have received this electronic mail transmission in error, please delete 
it from your system without copying it, and notify the sender by reply e-mail, 
so that our address record can be corrected.

********************************************************
This weeks sponsor Emergent Online Thinssentials Utilities
Using the latest software, hardware, networking technologies, proven technical 
expertise, proprietary software and best practices, EOL provides 
custom-tailored solutions for each client?s mission and specific goals.
http://www.go-eol.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: