Home / malware

PDF

Trojan.JS.Offensive.A

First posted on 21 November 2011.
Source: BitDefender

Aliases :

Trojan.JS.Offensive.A is also known as JS_OFFENSIVE.A.

Explanation :

This is a Trojan contained in a HTML file. When the HTML page is viewed, the page contains a button with the caption "Start!" and the page title that is an offensive text related to Japanese people.

If the user clicks that button and is using a browser capable of JavaScript and ActiveX (i.e. Microsoft Internet Explorer) the Trojan modifies some registry keys which can produce severe system damages, sets the title of Explorer and also the start page of the Internet Explorer to a site which contains in name offensive texts.

Also it changes the default behaviour for Explorer when executing some types of files (exe, reg, htm, html, txt, inf, dll, ini, sys, com, bat).

It sets in the registry some keys so the operating system will execute at the next startup different uninstall programs from the C:Windows directory which will attempt to uninstall Windows at next restart.

Last update 21 November 2011

 

TOP