Home Malware Programs Trojans HEUR:Trojan.Script.Iframer

HEUR:Trojan.Script.Iframer

Posted: November 11, 2010

HEUR:Trojan.Script.Iframer is a malicious Trojan infection which poses a threat to computer safety. HEUR:Trojan.Script.Iframer causes system confusion and leaves the web-browser unable to open certain pages. HEUR:Trojan.Script.Iframer attacks the web-browser so that software that may aid in the process of elimanating HEUR:Trojan.Script.Iframer cannot be downloaded onto the affected system. Use a reliable malware remover to make sure your PC is free of this threat.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command][HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]HKEY..\..\..\..{RegistryKeys}"Content Type"="application/x-msdownload"@="exefile"[HKEY_CLASSES_ROOT\.exe\shell\open\command][HKEY_CLASSES_ROOT\.exe][HKEY_CLASSES_ROOT\secfile]

One Comment

  • Limda says:

    When I go into regedit I do see application/x-msdownload, but I do not see @="exefile. I can follow directions very well, but I dont seem to uderstand what it is I am suppose to do. I undersatnd the removal of each line, but I only part of the lines not the whole thing as you have suggested here. Is there anyway to give me a step by step instruction on how to remove this. Scanned my computer with pctools Internet sercurity/. Nothing found. I have downloaded and scanned my computer with TDSSkiller by Kaspersky nothing found. Is there any other files I should be looking for to make sure HEUR:Trojan.script.Iframer has not hidden itself in. I only get this message of the Heur trojan when I go a particular website I frequented very much, any other web page is fine> I am just trying to make sure my computer is not infected. Thank you for your help.

Loading...