|
New trojan horse maintains an old hole in Microsoft Office |
|
Wednesday, 05 October 2005 |
|
The companies specializing on questions of network safety warn of occurrence on the Internet new Trojan horse, which was called name Hesive.
The harmful program Hesive penetrates to the computer through the hole in component Jet Database Engine, which is used in Microsoft Office and, in particular, in Microsoft Access. There is it at opening by a victim of the file of a database generated by special image in format MDB, the link on which, for example, can be sent on email or is placed on a website on the Internet.
After activation Hesive creates on a hard disk of the PC a file csrse.exe and it is registered in a key of automatic start of the registry of operational system Windows. Using a harmful program, criminals theoretically can carry out arbitrary actions on the remote computer, including load and start any programs, complete processes and modify the registry.
It is remarkable, that experts of firm HexView half-year ago informed about a critical hole in module Jet Database Engine. Then the notice on vulnerability has been sent to corporation Microsoft, however patches for a hole was not released.
Fortunately, Trojan horse Hesive for today has not received the big distribution. Besides to find out and remove the nocuous program from a computer does not represent special work. Nevertheless, as informs PC World referring to applications (statements) of representatives Microsoft, users are recommended to show care at loading MDB-files from unknown sources.
More information about Hesive
|
Advertises 