Trojan.Shixploit


Call Toll Free in the US and Canada!

Discovered:
June 16, 2011
Updated:
June 17, 2011 7:56:56 AM
Type:
Trojan
Infection Length:
7,227 bytes
Systems Affected:
Windows 98, Windows 95, Windows XP, Windows Me, Windows Vista, Windows NT, Windows Server 2003, Windows 2000
CVE References:
CVE-2011-1255
Trojan.Shixploit is a malicious HTML file that exploits the Microsoft Internet Explorer Time Element Uninitialized Memory Remote Code Execution Vulnerability (BID 48206) and downloads a potentially malicious file.


For more information, please see the following resource:
Exploit for June MS Tuesday Vulnerability in the Wild

Antivirus Protection Dates

  • Initial Rapid Release version June 17, 2011 revision 002
  • Latest Rapid Release version June 17, 2011 revision 002
  • Initial Daily Certified version June 17, 2011 revision 003
  • Latest Daily Certified version June 17, 2011 revision 003
  • Initial Weekly Certified release date June 22, 2011
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 0 – 49
  • Number of Sites: 0 – 2
  • Geographical Distribution: Low
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Low
  • Payload: Downloads a potentially malicious file onto the compromised computer.

Writeup By: Masaki Suenaga