Download.ject

In <a href="/facts/Computing/Kghtm9fX">computing</a>, Download.ject (also known as Toofer and Scob) is a <a href="/facts/Malware/5ee7TLFR">malware</a> program for <a href="/facts/Microsoft_Windows/bwhAhuSL">Microsoft Windows</a> servers. When installed on an insecure website running on <a href="/facts/Microsoft/nGIDDXdx">Microsoft</a> <a href="/facts/Internet_Information_Services/nqmfJr3T">Internet Information Services</a> (IIS), it appends malicious <a href="/facts/JavaScript/XhhIIEsl">JavaScript</a> to all pages served by the site.
Download.ject was the first noted case in which users of <a href="/facts/Internet_Explorer/uL8a4Y5l">Internet Explorer</a> for Windows could infect their computers with malware (a <a href="/facts/Backdoor_(computing)/4Vry8CKE">backdoor</a> and <a href="/facts/Keystroke_logging/DQRJfEvc">key logger</a>) merely by viewing a web page. It came to prominence during a widespread attack starting June 23, 2004, when it infected many servers including several that hosted financial sites. Security consultants prominently started promoting the use of <a href="/facts/Opera_(web_browser)/2NYCcTj1">Opera</a> or <a href="/facts/Mozilla_Firefox/xez2zv8H">Mozilla Firefox</a> instead of IE in the wake of this attack.
Download.ject is not a <a href="/facts/Computer_virus/IyTC1usq">virus</a> or a <a href="/facts/Computer_worm/9qKR1Hx5">worm</a>; it does not spread by itself. The June 23 attack is hypothesised to have been put into place by automatic scanning of servers running IIS.

Download.ject open-in-new

Download.ject