Re: Russian IIS hack? Malicious Javascript code

From: Geoff Lane (geoff_at_zorched.net)
Date: 06/24/04 

Date: 23 Jun 2004 15:33:45 -0700

We just got hit with the same thing. I think it started last night.
The files are located in
C:\<WINDOWS>\system32\inetsrv\

They're all 1kb dll file with names like iis7f.dll.

Any idea if this installs backdoors or anything?
We're in the process of requisitioning a replacement server, but it's
going to be a couple of hours before we can have it up.

I haven't been able to find much information on this, so it might be a
new one.

Relevant Pages

  • new install needed?
    ... i have been hit with a 'falcon spyware" they want $19 to send a removal ... i tried to delete .dll file associated with it and in the process, ... i can't boot to safe mode to try and get ...
    (microsoft.public.windowsxp.basics)
  • Re: MAILMAPI.dll
    ... MAILMAPI.dll looks to be an MSN file not an XP file. ... > When I hit certain link to go to internet addressess I ... I> have searched the knowledge base files and can find no> mention of this dll file. ...
    (microsoft.public.windowsxp.newusers)
  • Re: MAILMAPI.dll
    ... MAILMAPI.dll looks to be an MSN file not an XP file. ... > When I hit certain link to go to internet addressess I ... I> have searched the knowledge base files and can find no> mention of this dll file. ...
    (microsoft.public.windowsxp.newusers)
Quantcast