Microsoft plans to release an out-of-cycle security patch next week to fix a software flaw that led to the sophisticated Download.Ject malware attack, company officials disclosed on Wednesday.

The company will release the patch, which is currently being tested, next week as a "critical" security update to provide a "long-term solution to the core vulnerability" that led to the Download.Ject attack.

Dean Hachamovitch, Microsoft group product manager for Internet Explorer, made the announcement, saying the patch would cover IE versions 5.01, 5.5 and 6.0.

The software giant has already released a Trojan detection and removal tool to help PC users clean up after the attack, which targeted well-known software flaws to install keystroke loggers and other malicious code on infected systems.

The 118 kilobyte removal tool is programmed to remove the payload delivered by the server-side Download.Ject Trojan. The Trojan, also known as Scob, exploited vulnerabilities in Microsoft's IIS 5.0 servers and IE to distribute malware programs. It started spreading late last month after unknown attackers uploaded a small file with JavaScript to infected Web sites running Microsoft IIS 5.0 servers.

News source: Internetnews.com


Dice says: No wonder! It's not a surprise Nintendo will make double the profit. They hold best status for handheld gaming, and quite possibly for consoles as well. Gamecube leaving out the DVD Player feature boosted sales dramatically because of the price differences between Xbox and PS2 compared to Gamecube. People want to save money! The DVD feature should always be an OPTION, if you don't want it then you shouldn't have to pay for it. Plus with the largest collection of games, Gamecube and handhelds such as GC and GBA just seals the deal.



There are 6 additional comments
Advertisement
(1 reply) Quote this comment Reply to this comment #1 Posted by kainashi on 28 Jul 2004 - 19:30
about time.
Quote this comment #1.1 Posted by T-Metal on 28 Jul 2004 - 21:48
Yeah no kidding.
(2 replies) Quote this comment Reply to this comment #2 Posted by finalcoolman on 28 Jul 2004 - 19:45
I hope this will be included in SP2.
Quote this comment #2.1 Posted by todd` on 28 Jul 2004 - 20:08
I don't think SP2 was vulnerable in the first place
Quote this comment #2.2 Posted by chacho on 29 Jul 2004 - 16:53
QUOTE (#2.1)
I don't think SP2 was vulnerable in the first place

correct.
Quote this comment Reply to this comment #3 Posted by s.a.m. on 28 Jul 2004 - 20:32
It's going to be Friday. See this thread:
http://www.neowin.net/forum/index.php?showtopic=193949&st=0&
[1]

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.


Scroll to the Top
....
My Preferences
....
Communicating with server
Loading
Please Wait...
....
Loading
 X 
....