Microsoft has released an updated Trojan detection and removal tool to help PC users clean up after the sophisticated malware attack that loaded keystroke loggers and other malicious code on infected systems.

The 118 KB removal tool has been programmed to remove the payload delivered by the server-side Download.Ject Trojan. The Download.Ject Trojan, also known as Scob, exploited vulnerabilities in Microsoft's IIS 5.0 servers and Internet Explorer (IE) browser to distribute malware programs.

It started spreading late last month after unknown attackers uploaded a small file with JavaScript to infected Web sites running Microsoft IIS 5.0 servers.

A user visiting an infected site with IE automatically became infected with the JavaScript, which triggered a download from a Russian Web site. The download included Trojan horse programs like keystroke loggers, proxy servers and other back doors providing full access to the infected system.

On July 2, Microsoft issued a security update with PC configuration workarounds aimed at thwarting the attack.

Now, as the cleanup continues, the software giant is urging customers to use its updated removal tool to delete variants of the Trojan.

"Once the tool has run, it automatically checks for infection and removes any targeted Trojans that are found," the company said.

The tool was created specifically to remove the Download.Ject Trojan and will not detect or delete any viruses or worms.

LATEST NEWS

AMD Up, HP Down in the Numbers Game
Free VMware Server 2.0 Now Release Candidate
New Cheaper Storage Clouds Forming
Will Consumers Drown in a CPU Deluge?
IBM Buys Mainframe Player, Ends Lawsuit