Home / malware

PDF

Trojan:JS/Sillyexpl

First posted on 08 April 2013.
Source: Microsoft

Aliases :

Trojan:JS/Sillyexpl is also known as JS/Seeker (Command), JS/Seeker-R (Sophos), TR/Seeker (Avira), Trojan.JS.Seeker.EK (BitDefender), Trojan.JS.Seeker-based (Kaspersky).

Explanation :

Trojan:JS/Sillyexpl is a JavaScript code that tries to exploit vulnerabilities in ActiveX controls in Internet Explorer 6.0 and 5.5.

These vulnerabilities are fixed in Microsoft Security Bulletin MS03-020.

Usually, you won't realize this trojan has infected your computer until you get an alert from your security software.

This trojan runs when you visit a website that has a malicious JavaScript code.

By exploiting these vulnerabilities an attacker can run commands with local user permissions. Any webpage with malicious JavaScript can then change your computer's system files or settings.



Analysis by Karthik Selvaraj

Last update 08 April 2013

 

TOP