JS_PSYME.CIN

This JavaScript (JScript) may be hosted on a Web site and run when a user accesses the said Web site.

Upon access of this site, it takes advantage of a vulnerability in Microsoft Data Access Components (MDAC) Function. More information on the said vulnerability is available in the following Web site:

• Microsoft Security Bulletin MS06-014

This JavaScript accesses a Web site to download a file. It saves the downloaded file. However, the mentioned URL is inaccessible as of this writing.

This malicious JavaScript uses the CLSID {BD96C556-65A3-11D0-983A-00C04FC29E36}, which is already present on a normal system, for its code in exploiting the aforementioned vulnerability.

Related Items