F-Secure
Tools
Trojan-Downloader:JS/Agent.CKK
| Name : | Trojan-Downloader:JS/Agent.CKK |
| Detection Names : |
Trojan-Downloader.JS.Agent.ckk |
| Category: | Malware |
| Type: | Trojan-Downloader |
| Platform: | JS |
Summary
This type of trojan secretly downloads malicious files from a remote server, then installs and executes the files.
Additional Details
Upon execution, this trojan tries to take advantage of the following vulnerability:
If this vulnerability is present on the user's system, the malware exploits it in order to download and execute a file from the URL http://down.hs7yue.cn/[...]/ac.css. The downloaded file is detected as the malware Trojan.Win32.Agent.wnu.
The online F-Secure Health Check can help determine whether a user's system has vulnerabilities which can be exploited, and assist in finding fixes for any vulnerabilities discovered.
• Microsoft Office Snapshot Viewer ActiveX vulnerability
If this vulnerability is present on the user's system, the malware exploits it in order to download and execute a file from the URL http://down.hs7yue.cn/[...]/ac.css. The downloaded file is detected as the malware Trojan.Win32.Agent.wnu.
The online F-Secure Health Check can help determine whether a user's system has vulnerabilities which can be exploited, and assist in finding fixes for any vulnerabilities discovered.