Microsoft Puts Out Trojan-Horse Killer

Dom · Jul 15, 2004, 09:28 PM

Microsoft late Tuesday posted a software tool that cleans computers infected with a Trojan horse linked to the late June attack by Russian hackers who managed to compromise Web servers and users' machines that viewed pages on those sites.

Similar to previous tools that Microsoft has made available for such worms as Sasser and MSBlast, the Download.Ject Payload Detection and Removal Tool is available free of charge from the Redmond, Wash.-based developer's Web site. It's petite, just 118K in size.

The tool sniffs for the Trojan Berbew -- the payload that Download.Ject injected into end users' PCs via vulnerabilities in Internet Explorer -- and deletes them.

While the original attack was relatively mild in comparison with, say, Sasser or even MyDoom, Microsoft put some scary language into the online description of the tool.

"When this Trojan horse runs on the user's computer, it may perform several actions, including monitoring Internet access to capture sensitive information such as logon names and passwords, or opening fake dialog boxes that prompt the user to enter confidential information such as ATM card codes, credit card numbers or other confidential information," Microsoft said on the site.

Read More...

__________________
Source: CRN

Jul 15, 2004, 09:28 PM	#1
Dom DriverHeaven Extreme Member Join Date: Jun 2002 Posts: 12,940 Rep Power: 0	Microsoft Puts Out Trojan-Horse Killer Microsoft late Tuesday posted a software tool that cleans computers infected with a Trojan horse linked to the late June attack by Russian hackers who managed to compromise Web servers and users' machines that viewed pages on those sites. Similar to previous tools that Microsoft has made available for such worms as Sasser and MSBlast, the Download.Ject Payload Detection and Removal Tool is available free of charge from the Redmond, Wash.-based developer's Web site. It's petite, just 118K in size. The tool sniffs for the Trojan Berbew -- the payload that Download.Ject injected into end users' PCs via vulnerabilities in Internet Explorer -- and deletes them. While the original attack was relatively mild in comparison with, say, Sasser or even MyDoom, Microsoft put some scary language into the online description of the tool. "When this Trojan horse runs on the user's computer, it may perform several actions, including monitoring Internet access to capture sensitive information such as logon names and passwords, or opening fake dialog boxes that prompt the user to enter confidential information such as ATM card codes, credit card numbers or other confidential information," Microsoft said on the site. Read More... __________________ Source: CRN