Malware type: JavaScript

Aliases: Trojan-Downloader.JS.gen (Kaspersky), Exploit-MhtRedir.gen (McAfee), MHTMLRedir.Exploit (Symantec), TR/Dldr.2680 (Avira), JS/Small-D (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 95, 98, ME, NT, 2000, and XP

Encrypted: Yes

Description: 

This Trojan script usually arrives as an encrypted Java script file embedded in malicious Web pages. It exploits several vulnerabilities in Internet Explorer in order to download and execute malicious files on the affected system.

Among those downloaded files is MSITS.EXE, which Trend Micro detects as BKDR_BERBEW.F. However, as of this writing, the Web site from where this Trojan script attempts to download malicious files is already inaccessible.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jun. 26, 2004 9:28:50 AM GMT -0800
Description updated: Jun. 26, 2004 1:25:24 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.