Sophos

Troj/Psyme-BA

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Web browsing
Affected operating systems Windows
Protection available since 8 November 2004 22:18:21 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Psyme-BA is a JavaScript downloader Trojan which exploits the ADODB stream vulnerability associated with some versions of Microsoft Internet Explorer to silently download a file from a remote location to

<Program Files folder>\Windows Media Player\wmplayer.exe,

replacing any existing file.

Troj/Psyme-BA can arrive on the computer by browsing websites whose HTML pages contain the script or by visiting a HTML page that contains a SRC= link to an infected page.

Troj/Psyme-BA is known to be loaded via some versions of Troj/MhtRedir-H. For further information please refer to the Troj/MhtRedir-H description.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer