Symptoms

Removal instructions:

Analyzed By

Technical Description:

This trojan creates 2 invisible iframes in infected HTML pages. An iframe is a component that allows a browser to display web-pages inside other web-pages. This trojan will load infected web-pages inside other (possibly clean) pages. It will first create an invisible iframe (height = 0), and then will attempt to detect what browser is he running in. Depending on the detected browser, it will load infected web-pages in the iframe. It will also mark the machines where it was already ran by creating a cookie.