Trojan loose that takes on Windows vulnerability

20 Jul 2005

The first Trojan horse that exploits a still-unpatched vulnerability in Microsoft Windows has been seen in circulation, security vendor Symantec said Tuesday.

Called Trojan.Jevproxy by Symantec, the malware exploits the Javaprxy.dll vulnerability that was first announced by Microsoft in a security advisory earlier this month. Microsoft has provided a workaround that disables the .dll file, even pushed it out via Auto Update to users, but has not released a patch that solves the root problem.

"Trojan.Jevproxy is a javascript exploit that attempts to download a file" from a Website, said Symantec. All attempts to download the additional code have been unsuccessful, Symantec added. The Cupertino, Calif.-based company currently ranks the Trojan as a level "1" threat, its lowest rating.

Even so, Symantec recommended that administrators apply the workaround and block communication with the Website at 218.57.137.86.

UKFast is not responsible for the content of external Internet sites.

print this article