Home / malware

PDF

Adware:JS/Pornpop

First posted on 28 March 2012.
Source: Microsoft

Aliases :

Adware:JS/Pornpop is also known as APPL/Pornpop.A (AVG), AdWare.JS.Pornpop (Ikarus), HTML/Pornpop.A (Norman), JS.Pornpop.Gen (VirusBuster).

Explanation :

Adware:JS/Pornpop is a detection for specially-crafted JavaScript-enabled objects that attempt to display pop-under advertisements.
Top

Adware:JS/Pornpop is a detection for specially-crafted JavaScript-enabled objects that attempt to display pop-under advertisements.

It is common for this detection to trigger in a user's Internet cache. This may indicate that the user has recently visited a website that attempted to display pop-under advertisements. Its first versions appeared exclusively on websites that contained adult content; however JS/Pornpop has since evolved to appear even on websites that may contain no adult content whatsoever. Hence JS/Pornpop may be detected even if a user has not visited a website containing adult content.

As a JavaScript-enabled object, JS/Pornpop can run in any JavaScript-enabled browser.



Analysis by Marian Radu & Zarestel Ferrer

Last update 28 March 2012

 

TOP