JS_MEDFOS.TP
Trojan:JS/Medfos.B (Microsoft), [manager.js]:Medfos.ak (McAfee), JS/Redirector.NCG trojan (NOD32), Trojan.JS.Medfos.b (v) (Sunbelt), JS/Redir.BP (AVG)
Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)
Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
This is the Trend Micro detection for files that contain a malicious script. It redirects browsers to certain sites.
TECHNICAL DETAILS
6,525 bytes
Script
05 Feb 2013
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Other Details
This is the Trend Micro detection for files that contain a malicious script.
It redirects browsers to the following sites:
- http://{BLOCKED}e-instant-search.com/js/disable.js