Home / malware

PDF

Trojan:JS/Redirector.DH

First posted on 13 July 2010.
Source: SecurityHome

Aliases :

Trojan:JS/Redirector.DH is also known as JS/Redirect (AhnLab), JS/Redir.BL (Authentium (Command)), Trojan.JS.Redirector.dz (Kaspersky), JS.Redirector.Gen.8 (VirusBuster), JS/Pegel.BR.843 (Avira), JS/Redirector.E (CA), JS/TrojanDownloader.Pegel.BR (ESET), Trojan.JS.Redirector (Ikarus), JS/Redirector (McAfee), Troj/JSRedir-BO (Sophos), JS_REDIR.AD (Trend Micro).

Explanation :

Trojan:JS/Redirector.DH is the detection for obfuscated JavaScript contained within webpages (usually it can be found at the end of the page).
Top

Trojan:JS/Redirector.DH is the detection for obfuscated JavaScript contained within webpages (usually it can be found at the end of the page). Installation This JavaScript trojan may be present on a malicious website, and may redirect users to websites other than expected. Payload Redirects web browser Trojan:JS/Redirector.DH generates dynamic Javascript code that redirects the browser to the following domain: hxxp://shoppingbazzar.co.uk/z.htm

Analysis by Tim Liu

Last update 13 July 2010

 

TOP