Windows users could lose control of their systems by simply visiting a Web site hosting malicious code, Microsoft warns.

Trojan horse rides on unpatched IE flaw