TrojanDownloader:Java/OpenConnection.F is a malicious Java applet that downloads and runs other malicious files from a remote Web site. The downloader often works with Java/Classloader and Java/Bytverify, which exploit the vulnerability addressed in Microsoft Security Update MS03-011.

Worm:Win32/Kolabc.C is a worm that can spread to removable drives and to other networked computers by exploiting vulnerabilities described in Microsoft Security Bulletins MS03-039, MS06-040 and MS08-067. The worm contains backdoor functionality that allows an attacker remote access and control of the infected computer.

TrojanDownloader:QT/Waick.B is an approximately 3.6 Mb Quick Time media file which, when opened by Quick Timer player, attempts to social-engineer users in to downloading and executing malicious files from remote sites.

Exploit:Win32/CVE-2011-0977 is the generic detection for specially crafted Microsoft Office files that exploit a vulnerabilty discussed in CVE-2011-0977 and mitigated with the release of Microsoft Security Bulletin MS11-023.

Exploit:HTML/CVE-2008-2551.gen!A is the detection for HTML files that exploit a vulnerability in Icona SpA C6 Messenger version 1.0.0.1.

Exploit:Win32/CVE-2012-1889.A allows an attacker to download and run arbitrary files on your computer.

Make sure you install all available updates from Microsoft to avoid this exploit. For more information on updating Microsoft products please see the Additional information section in this entry.

More details on the vulnerability, including a list of affected Microsoft software, can be found in Microsoft Security Bulletin MS12-043.

Exploit:Win32/CVE-2012-1889.A is the detection for JavaScript code that attempts to exploit a vulnerability in Microsoft XML Core Services versions 3.0, 4.0, 5.0 and 6.0 (described in CVE-2012-1889).

Trojan:JS/Adclicker is the detection for a webpage that contains code used to redirect users to other sites that may contain malware.