Home / malware

PDF

TrojanDownloader:JS/Psyme.NC

First posted on 06 July 2010.
Source: SecurityHome

Aliases :

TrojanDownloader:JS/Psyme.NC is also known as VBS/Psyme.IU (Authentium (Command)), VBS/TrojanDownloader.Psyme.NGJ (ESET), Trojan-Downloader.VBS.Agent.vw (Kaspersky).

Explanation :

TrojanDownloader:JS/Psyme.NC is a detection for an obfuscated script that attempts to download malware from a Web site.
Top

TrojanDownloader:JS/Psyme.NC is a detection for an obfuscated script that attempts to download malware from a Web site. InstallationThe malicious script may be encountered when browsing a compromised Web page. When the script executes, it performs its file retrieval payload. Payload Downloads arbitrary filesWhen TrojanDownloader:JS/Psyme.NC runs, it attempts to retrieve arbitrary files from a predefined Web site such as "corpadsinc.com". At the time of this writing, the requested file was not available for analysis.

Analysis by Vincent Tiu

Last update 06 July 2010

 

TOP