 |
|
 |
|
DizzyX
Administrator
Data inscrierii: 16/Iul/2008
Mesaje: 48
|
|
 |
|
 |
|
 Trimis: 16/07/2008 02:29 Titlul subiectului: Trojan.Downloader.JS.JH |
 |
|
Trojan.Downloader.JS.JH
( Trojan-Downloader.JS.Agent.bsh, JS/TrojanDownloader.Iframe.EY.gen, TR/Dldr.Agent.bsg, JS_AGENT.AGUA, HEUR/Exploit.HTML )
Raspandire : mediu
Dauna : scazut
Size: 2kB - 30kB
Descoperit : 2008 Apr 24
SYMPTOMS:
Not applicable.
TECHNICAL DESCRIPTION:
Trojan.Downloader.JS.JH it is an obfuscated JavaScript.
Files containing it are served from different websites, so they are probably created by a malware kit.
The script's "payload" differ from case to case (iframe injections, different exploits, etc.). Main purpose of the script is to install malware on the user's computer.
The script tries to protect itself from modification by using it's own code as an parameter for the decryption of the payload. It is not unusual to have multiple layers of encryption to make analysis harder and more time consuming. |
|
FAQ 
Mesaje private 
