Home / malware

PDF

TrojanDownloader:JS/Renos

First posted on 16 April 2009.
Source: SecurityHome

Aliases :

TrojanDownloader:JS/Renos is also known as Also Known As:Downloader (Symantec).

Explanation :

TrojanDownloader:JS/Renos is a JavaScript trojan that displays misleading reports of system infection. It also downloads other malware into the system.

Symptoms
System ChangesThe following system changes may indicate the presence of this malware:

The display of the following messages:

TrojanDownloader:JS/Renos is a JavaScript trojan that displays misleading reports of system infection. It also downloads other malware into the system. It arrives in a system when a user visits websites containing these malicious JavaScript codes. It disguises itself as an free online scanner, which purportedly identifies system infection: It then produces a fake infection report, such as the following: It then prompts the user to download and install a rogue antivirus program: Clicking on the pop-up message downloads a trojan, detected as Trojan:Win32/Tibs.J, in the system.

Analysis by Elda Dimakiling

Last update 16 April 2009

 

TOP