Malware type: HTML

Aliases: W32.Fujacks!html(Symantec), Troj/Fujif-Gen(Sophos), HTML/IFrame.Agent.S(Avira), HTML/IFrame (exact)(F-Prot)

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Description: 

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview

This is the Trend Micro detection for HTML pages and compromised Web sites that contain malicious iFrame tags.

It is known to be hosted on the following URL:

• http://77.221.{BLOCKED}.188/.if/go.html

Once an unsuspecting user visits or views an affected Web page, this malicious HTML connects to certain URLs to download a possibly malicious file. As a result, routines of the downloaded file are also exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: Nov. 6, 2007 10:56:50 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.