Author Topic: Check this out...  (Read 2723 times)

0 Members and 1 Guest are viewing this topic.


Offline radicalb21

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 438
  • Be Safe. Be Smart. Use Common Sense.
Re:Check this out...
« Reply #1 on: June 25, 2004, 07:06:26 PM »
Hey Sasha check out this link:

http://forum.avast.com/index.php?board=2;action=display;threadid=5499

Here is my post in the AVAST 4 Home/Pro section of the forum. Here is a link to department of homeland security site:

http://www.us-cert.gov/current/current_activity.html#iis5

Here is the text:

IIS 5 Web Server Compromises
added June 24

US-CERT is aware of new activity affecting compromised web sites running Microsoft's Internet Information Server (IIS) 5 and possibly end-user systems that visit these sites. Compromised sites are appending JavaScript to the bottom of web pages. When executed, this JavaScript attempts to access a file hosted on another server. This file may contain malicious code that can affect the end-user's system. US-CERT is investigating the origin of the IIS 5 compromises and the impact of the code that is downloaded to end-user systems.

Web server administrators running IIS 5 should verify that there is no unusual JavaScript appended to the bottom of pages delivered by their web server.

This activity is another example of why end users must exercise caution when JavaScript is enabled in their web browser. Disabling JavaScript will prevent this activity from affecting an end-user's system, but may also degrade the appearance and functionality of some web sites that rely upon JavaScript. US-CERT recommends that end-users disable JavaScript unless it is absolutely necessary. Users should be aware that any web site, even those that may be trusted by the user, may be affected by this activity and thus contain potentially malicious code.
 I hope this helps.
iMac 21.5 " Mid 2011 2.7 GHz Intel Core i5
4 GB 1333 MHz DDR3
AMD Radeon HD 6770M 512 MB

Offline Max M.Wachtel III

  • Sr. Member
  • ****
  • Posts: 326
  • Long Live Freeware
    • Keeping Windows Clean
Re:Check this out...
« Reply #2 on: June 25, 2004, 10:09:42 PM »
this is from e-week:

Microsoft has issued a security alert on the attack, called Download.Ject. The company says that their MS04-011 update, issued in April, addresses vulnerability to the attack on the server end. The bulletin also says that systems running Release Candidate 2 of Windows XP Service Pack 2 are not vulnerable to the client-side attack, and that other systems can be protected from downloads of malicious code by having all current critical patches installed and running Internet Explorer with its security settings at "High."

Link to article:http://www.eweek.com/article2/0,1759,1617233,00.asp?kc=ewnws062504dtx1k0000599

-max
When I stop learning I stop living-max
Virus Removal Instructions
http://home.neo.rr.com/manna4u/