Malware type: HTML

Aliases: Exploit.HTML.Mht (Kaspersky), Exploit-MhtRedir.gen (McAfee), MHTMLRedir.Exploit (Symantec), HTML/Exploit.OBJ-Mht (Avira), Troj/Rider-I (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, XP

Encrypted: No

Description: 

This is the Trend Micro detection for websites compromised by the insertion of an encrypted malicious JavaScript file.

The said script file checks for the affected system's web browser and its version. It then generates a random string based on the version, then appends the said string to a certain URL.

It then connects to the generated URL to possibly download other malicious files. As a result, routines of the downloaded files are also exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 20, 2009 2:43:41 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.