Jump to content
Sign in to follow this  

check for download.ject

Recommended Posts


After reading MS's site on download.ject I wrote this script to check for the virus.

it's simple, but might help others who are wondering, like I am, if work has decided to do anything about checking for this one.

;check for ject
$kk32 = runwait(@comspec & " /c dir /a /s /b %systemdrive%\kk32.dll",@SystemDir, @SW_HIDE)
$surf = runwait(@comspec & " /c dir /a /s /b %systemdrive%\surf.dat",@SystemDir, @SW_HIDE)
$msg = "You PC doesn't appear to be infected with Download.Ject" & @LF
if $kk32 = 1 then  $msg = $msg &@TAB &"kk32.dll not found (this is good)" & @LF   
if $surf = 1 then $msg = $msg &@TAB& "surf.dat not found (this is good)" & @LF
$msg = $msg & "You should still be certain to download all updates from windowsupdates.com and follow MS's other security steps."
if $kk32 =0 or $surf =0 Then
   MsgBox(0,"get help","You're infected, get help now.  This probably means running a virus scan and calling IT")
   MsgBox(0, "kk32", $msg)

"I'm not even supposed to be here today!" -Dante (Hicks)

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  


Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.