Your essential free software toolbox

SHARE
THIS ON

Trojan.IFrame.P

LOW

MEDIUM

varies

()

Symptoms

This is a script virus, and due to it's generic nature, there are no obvious symptoms. However, unusual internet traffic might be observed, as well as suspicious running processes.

Removal instructions:

Please let BitDefender disinfect your files.

Analyzed By

Patrik Vicol, virus researcher

Technical Description:

Trojan.IFrame.P is a small html code that opens a hidden browser window from address http://(removed)/data/title.html containing an Adodb.Stream exploit (detected by BitDefender as Exploit.ADODB.Stream.FD), which downloads and executes a binary file (also detected as Trojan.Downloader.Femad.XA).