This configuration change to the Windows XP, Windows Server 2003 and Windows 2000 operating systems improves system resiliency to protect against the Download.Ject attack.

On Thursday, June 24, 2004, Microsoft responded to reports that some customers running IIS 5.0 (Internet Information Services), a component of Windows 2000 Server, were being targeted by malicious code, known as "Download.Ject." Internet service providers and law enforcement, working together with Microsoft, identified the origination point of the attack -- a Web server located in Russia -- and shut it down on Thursday, June 24, 2004. (Additional information about Download.Ject is available at http://www.microsoft.com/security/incident/download_ject.mspx.)

The security of our customers’ computers and networks is a top priority for Microsoft, and we have been working around-the-clock to further address the criminal malware targeting Internet Explorer users. On Friday, July 2, 2004, Microsoft released a configuration change to the Windows XP, Windows Server 2003, and Windows 2000 operating systems that improves system resiliency to protect against the Download.Ject attack. The configuration change is currently available on Microsoft’s Download Center and will be made available later today on Windows Update.

Customers who have enabled automatic updates will receive the configuration change automatically.