Home / malware

PDF

VirTool:JS/Obfuscator.CK

First posted on 30 March 2012.
Source: Microsoft

Aliases :

There are no other names known for VirTool:JS/Obfuscator.CK.

Explanation :

VirTool:JS/Obfuscator.CK is a program that has had its purpose obfuscated to hinder analysis or detection by antivirus scanners; this threat is often used to hide another JavaScript.


Top

VirTool:JS/Obfuscator.CK is a program that has had its purpose obfuscated to hinder analysis or detection by antivirus scanners; this threat is often used to hide another JavaScript.

This obfuscator has been found attached to the end of "clean" JavaScript files, suggesting that a server may have been hacked to distribute this malware.

These obfuscation techniques are used on various kinds of malware. The malware that lies "underneath" may have virtually any purpose; however typically this threat may be used to redirect the web browser to run a script on an external website, for example:

rspqwtbbvo.homeftp.net/g/



Analysis by Chris Stubbs

Last update 30 March 2012

 

TOP