BitDefender Antivirus

Trojan.JS.QAE

( Trojan.Click.39088, Trojan-Clicker.JS.Iframe!IK, HTML:Illiframe-F, JS/iFrame.A!generic, JS/IFrame.HC.gen, Troj/Iframe-DL )
Propagation : medium
Dégât : low
Size: aprox 300 bytes
Détecté : 2010 Jan 27

SYMPTOMS:

There are no obvious symthoms for this specific trojan.

TECHNICAL DESCRIPTION:

The Trojan is a special written JavaScript, designed in a cryptic way in order to avoid detection or to make the code harder to be read.

When executed (by the browser) the script creates a hidden "Iframe" which leads to another malicious webpage "http://hardsextube-com.twitter.com.rakuten-co-jp.[removed].ru:8080/index.php?js" (unavailable at the time of the analysis).

Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Daniel Chipiristeanu, virus researcher