[Microsoft] Microsoft responded to reports that some customers running IIS 5.0 (Internet Information Services), a component of Windows 2000 Server, were being targeted by malicious code, known as “Download.Ject.” Internet service providers and law enforcement, working together with Microsoft, identified the origination point of the attack — a Web server located in Russia — and shut it down on Thursday, June 24, 2004. (Additional information about Download.Ject is available at http://www.microsoft.com/security/incident/download_ject.mspx.)

You should head on over to Windows Update and download the latest security updates. You can also go to http://www.microsoft.com/downloads/details.aspx?FamilyID=4D056748-C538-46F6-B7C8-2FBFD0D237E3&DisplayLang=en to download the specific patch.