Malware type: Html

Aliases: Trojan-Downloader.JS.Agent.bwo (Kaspersky), Mal/Iframe-I (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Description: 

This malicious HTML script may be downloaded from remote site(s) by the following malware:

• JS_AGENT.ALIP

It may arrive bundled with malware packages as a malware component.

It connects, via an iFrame tag, to several URLs to download the following malware:

• JS_SENGLOT.C
• HTML_DLOADR.CJ
• JS_REPL.CB
• EXPL_EXECOD.A

This malicious HTML script also connects to another URL to download JS_AGENT.ALIG. As a result, routines of the downloaded files are exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 7, 2008 11:05:56 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.