Sophos

Troj/JSShell-D

Aliases
  • Exploit.Win32.IMG-ANI.af
  • Exploit.HTML.IESlice.l
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Web browsing
Affected operating systems Windows
Protection available since 18 June 2007 19:19:04 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/JSShell-D is a Java script Trojan that attempts to exploit a buffer overflow vulnerability associated with certain browsers, to run a small amount of executable code.

This code then tries to download an executable file from a remote location and run it.

Troj/JSShell-D arrives by browsing web pages that contain the Troj/JSShell-D script, or link to the Troj/JSShell-D script.

Troj/JSShell-D may similarly arrive by viewing email messages containing HTML content.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer