Home / malware

PDF

Virus:JS/Xorer.J

First posted on 13 June 2019.
Source: Microsoft

Aliases :

Virus:JS/Xorer.J is also known as HTML/Diskgen, Virus.Win32.Xorer.du, W32.Pagipef.I!html, HTML_AGENT.AFBL.

Explanation :

Virus:JS/Xorer.J is the detection given for script files that are infected with an encoded and potentially malicious URL link in a script tag. The said script files are infected by variants of Virus:Win32/Xorer family. It arrives on the system as a script file (HTML, HTM, JS) that has been infected by members of Virus:Win32/Xorer family. The encoded script tag is appended at the end of the host file.   When the script executes it may connect to a Web site with the domain 'js.k0102.com'. At the time of publishing, the requested page on the Web site was not available.  Analysis by Elda Dimakiling

Last update 13 June 2019

 

TOP