Logo
Go

Trojan.IFrame.AS

Spreading: medium
Damage: medium
Size: 381 bytes
Discovered: 2007 Dec 13

SYMPTOMS:

A internet page that has the title "403 Forbidden" and displays the follotext inside the page : "Forbidden
You don't have permission to access /.if/go.html on this server "

TECHNICAL DESCRIPTION:

The malware consists in a browser exploit which uses "iframes" to connect to other website without the users consent.
If set with the right parameters the "iframe" can be a non-visible component of the page's code that can route to other sites that have malware on them. The iframe points to a site ( " 77.221.133.*** " ).

Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Daniel Chipiristeanu, virus researcher