Attack Pierces Fully Patched XP Machines

kelston · Aug 20, 2004, 09:26 PM

"Security researchers have identified a new version of the Download.Ject attack that is now being used on the Internet and can compromise fully patched Windows XP machines.

The new version of the attack just appeared Thursday afternoon, and while details are still sketchy, experts say its main purpose is to install a back door on compromised PCs. Users victimized by the attack receive an e-mail or an instant message containing a link directing them to a malicious Web page."

Full article: eWeek

icetrey47 · Aug 20, 2004, 10:45 PM

"But machines running SP2 (Service Pack 2) for XP are not vulnerable to the new attack. Larholm added that the vulnerabilities exploited in this attack have been known for some time."

drakesteakn · Aug 20, 2004, 10:59 PM

another reason why microsoft sucks, still flaws

Zardon · Aug 20, 2004, 11:16 PM

Thread title corrected as this has in fact nothing to do with SP2.

The_Neon_Cowboy · Aug 20, 2004, 11:19 PM

Quote:

Originally Posted by drakesteakn

another reason why microsoft sucks, still flaws

If people don't patch it's not MS's fault... People should be useing SP2

eggs420 · Aug 21, 2004, 12:08 AM

They should? It hasn't even been released to WU, please do not tell me you expect more than a minority of XP users to upgrade before that time.

Zelig · Aug 21, 2004, 12:34 AM

Normal users can't be expected to have SP2 yet, since MS has been saying everywhere that the best way to get it is via automatic updates, and it's not available there, or on WU yet.

kelston · Aug 21, 2004, 01:04 AM

Oops, my fault, was trying to submit 2 separate articles, sorry! The other was SP2 related!

Aug 20, 2004, 09:26 PM	#1
kelston DriverHeaven Addict Join Date: May 2003 Location: Bayside, NY USA Posts: 339 Rep Power: 0	Attack Pierces Fully Patched XP Machines "Security researchers have identified a new version of the Download.Ject attack that is now being used on the Internet and can compromise fully patched Windows XP machines. The new version of the attack just appeared Thursday afternoon, and while details are still sketchy, experts say its main purpose is to install a back door on compromised PCs. Users victimized by the attack receive an e-mail or an instant message containing a link directing them to a malicious Web page." Full article: eWeek

Aug 20, 2004, 10:45 PM	#2
icetrey47 DriverHeaven Newbie Join Date: May 2002 Posts: 14 Rep Power: 0	"But machines running SP2 (Service Pack 2) for XP are not vulnerable to the new attack. Larholm added that the vulnerabilities exploited in this attack have been known for some time." __________________ AMD Athlon XP 2500+ @ 3000+ 1GB Corsair PC3200 DDR (dual-channel) MSI K7N2 Delta-L Sapphire ATI X800XT Platinum SB Audigy 2 WinXP Pro - SP2

Aug 20, 2004, 10:59 PM	#3
drakesteakn boo!!!! Join Date: Aug 2003 Location: Ft. Meyers, FL Posts: 2,041 Rep Power: 46	another reason why microsoft sucks, still flaws __________________

Aug 20, 2004, 11:16 PM	#4
Zardon DriverHeaven Founder Join Date: May 2002 Posts: 32,481 Rep Power: 162	Thread title corrected as this has in fact nothing to do with SP2.

Aug 21, 2004, 12:08 AM	#6
eggs420 my bud > yours Join Date: Apr 2004 Location: chicago Posts: 399 Rep Power: 0	They should? It hasn't even been released to WU, please do not tell me you expect more than a minority of XP users to upgrade before that time.

Aug 21, 2004, 12:34 AM	#7
Zelig HardwareHeaven Extreme Member Join Date: Jun 2003 Location: Canada Posts: 3,182 Rep Power: 57 System Specs	Normal users can't be expected to have SP2 yet, since MS has been saying everywhere that the best way to get it is via automatic updates, and it's not available there, or on WU yet.

Aug 21, 2004, 01:04 AM	#8
kelston DriverHeaven Addict Join Date: May 2003 Location: Bayside, NY USA Posts: 339 Rep Power: 0	Oops, my fault, was trying to submit 2 separate articles, sorry! The other was SP2 related!