Thread: [Merged] Microsoft Security Updates
View Single Post
Old 14-07-2004, 07:11   #5
Tricky
Inactive
 
Tricky's Avatar
 
Join Date: Jun 2003
Location: I am house...
Services: $KY+HD - BT Infinity
Posts: 2,284
Tricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful oneTricky is the helpful one
Re: Microsoft Security Updates
Updates:
Quote:
One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Moderate, MS04-018
- One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Important, MS04-019
- One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Important, MS04-020
- One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Important, MS04-021
- One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Critical, MS04-022
- One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Critical, MS04-023
- One Microsoft Security Bulletin affecting Microsoft Windows with a maximum severity of Important, MS04-024

Summaries for these new bulletins may be found at the following page:
- http://www.microsoft.com/technet/sec.../ms04-jul.mspx
You may also be interested in:
Quote:
Microsoft has learned of a Trojan program that is downloaded by the Download.Ject malware, also known as Scob, to client machines from infected IIS servers. When a user visits a Web site hosted on an IIS server that is infected with Download.Ject, the Web pages downloaded to the userâ₠¬Ã¢â€žÂ¢s system contain an additional JavaScript program that downloads another Trojan program to the userâ₠¬Ã¢â€žÂ¢s system. This second Trojan is called Backdoor:W32/Berbew, also known as Backdoor-AXJ, Webber, or Padodor. When this second Trojan runs on the userâ₠¬Ã¢â€žÂ¢s machine, it performs several actions, including:

- Monitoring Internet access. When the user visits one of several financial or ISP Web sites, the Trojan captures sensitive informationââ ¡Ã‚¬Ã¢â‚¬Âsuch as log-in names, passwords, and so onâ₠¬ÃƒÂ¢Ã¢â€šÂ¬Ã‚and sends it to a Web server for the TrojanÃƒÂ¢Ã¢â€šà ¬Ã¢â€žÂ¢s author to retrieve.
- Installing a proxy server that allows the userâ₠¬Ã¢â€žÂ¢s system to be used as a relay for such actions as sending spam.
- Opening fake dialog boxes that prompt the user to enter confidential information such as ATM card codes, credit card numbers, and so on. This information is then sent to a Web server for the TrojanÃƒÂ¢Ã¢â€šà ¬Ã¢â€žÂ¢s author to retrieve.

Microsoft has released a tool to help you remove Backdoor:W32/Berbew Trojan variants from your computer. You can download this tool from the Microsoft Download Center and run it on your computer to remove Backdoor:W32/Berbew.A, Backdoor:W32/Berbew.B, Backdoor:W32/Berbew.C, and Backdoor:W32/Berbew.D, Backdoor:W32/Berbew.E, Backdoor:W32/Berbew.F, Backdoor:W32/Berbew.G and Backdoor:W32/Berbew.H infections.
This tool is discussed in Microsoft Knowledge Base article 873018. This KB can be found here:
http://support.microsoft.com/default.aspx?kbid=873018
Tricky is offline   Reply With Quote