General Discussion - Virus warning for people running IIS

Print Page | Close Window

Virus warning for people running IIS

Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: General Discussion
Forum Description: General discussion and chat on any topic.
URL: https://forums.webwiz.net/forum_posts.asp?TID=10996
Printed Date: 31 March 2026 at 6:36pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Virus warning for people running IIS

Posted By: dpyers
Subject: Virus warning for people running IIS
Date Posted: 25 June 2004 at 4:06pm

http://www.msnbc.msn.com/id/5290386 - http://www.msnbc.msn.com/id/5290386

-------------

Lead me not into temptation... I know the short cut, follow me.

Replies:

Posted By: Mart
Date Posted: 25 June 2004 at 4:19pm

That sucks, is there not a hotfix availiable yet?

Posted By: dpyers
Date Posted: 26 June 2004 at 12:00pm

Here's an update on the situation. Still awaiting the 3rd fix from MS. Apparently W2K sites enabling emailing attachments such as those using osticket were among the targets. Once a site's infected, you can catch the infection on your local pc just by visiting the site.
XP Svc Pack 2, RC2 people are safe.

The MS site has info on how to detect if you're infected:
http://www.microsoft.com/security/incident/download_ject.mspx - http://www.microsoft.com/security/incident/download_ject.msp x

http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2004/06/26/BUGND7CI841.DTL - http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2004/06/26/ BUGND7CI841.DTL

-------------

Lead me not into temptation... I know the short cut, follow me.

Posted By: huwnet
Date Posted: 26 June 2004 at 12:25pm

I am rc2

Posted By: Semikolon
Date Posted: 26 June 2004 at 1:35pm

an update is already finished.......

Microsoft wrote:

Reports indicate that Web servers running Windows 2000 Server and IIS that have not applied update 835732, which was addressed by http://www.microsoft.com/technet/security/bulletin/MS04-011.mspx - Microsoft Security Bulletin MS04-011 , are possibly being compromised and being used to attempt to infect users of Internet Explorer with malicious code.

it was released months ago..

Or am I wrong?

Posted By: dpyers
Date Posted: 26 June 2004 at 2:51pm

Semikolon wrote:

an update is already finished.......

it was released months ago..

Or am I wrong?

Apparently 3 patches are required. Two are already out, but the 3rd hasn't been released yet.

-------------

Lead me not into temptation... I know the short cut, follow me.

Posted By: dpyers
Date Posted: 26 June 2004 at 2:53pm

huwnet wrote:

I am rc2

Not me. IIRC, the lions ate the early christians -

-------------

Lead me not into temptation... I know the short cut, follow me.

Posted By: Semikolon
Date Posted: 26 June 2004 at 4:33pm

dpyers wrote:

Semikolon wrote:

an update is already finished.......

it was released months ago..

Or am I wrong?

Apparently 3 patches are required. Two are already out, but the 3rd hasn't been released yet.

sorry, my bad.. didn't read the MSNBC news before I read the Download.Ject page on MS.com

Posted By: Semikolon
Date Posted: 02 July 2004 at 1:24pm

the missing update has now been released

http://www.microsoft.com/downloads/details.aspx?FamilyID=4D056748-C538-46F6-B7C8-2FBFD0D237E3&DisplayLang=en - Download here