Home / malware

PDF

Trojan:JS/Redirector.ID

First posted on 26 March 2012.
Source: Microsoft

Aliases :

Trojan:JS/Redirector.ID is also known as JS/Redir.AR (Command), Trojan-Downloader.JS.Expack.di (Kaspersky), JS.Srcid.Gen (VirusBuster).

Explanation :

Trojan:JS/Redirector.ID is a JavaScript that loads another script from a server located in 31.184.242.102 or 31.184.242.103.


Top

Trojan:JS/Redirector.ID is a JavaScript that loads another script from a server located in 31.184.242.102 or 31.184.242.103.

In the wild, Trojan:JS/Redirector.ID has been found added to the end of existing JavaScript from WordPress installations.

If a user visits a page that contains Trojan:JS/Redirector.ID, it sends what browser is currently being used to the server loading the script.



Analysis by Chris Stubbs

Last update 26 March 2012

 

TOP