Home Malware Programs Trojans Trojan:JS/BlacoleRef.CL

Trojan:JS/BlacoleRef.CL

Posted: December 7, 2012

Threat Metric

Threat Level: 9/10
Infected PCs: 40
First Seen: December 7, 2012
OS(es) Affected: Windows

Trojan:JS/BlacoleRef.CL is a JavaScript Trojan that is often inserted into hijacked websites. Computer users get infected with Trojan:JS/BlacoleRef.CL when visiting a hacked website. Trojan:JS/BlacoleRef.CL is created to load a hidden IFrame that loads behind the affected PC user's web browser, rerouting it to an exploit server known as 'Blackhole'. A vulnerable website may enable an attacker to successfully embed a client-side script, which then runs when a PC user visits the attacked website. Trojan:JS/BlacoleRef.CL loads a hidden IFrame that references a malicious host, which exploits numerous known vulnerabilities in the Internet browser. The malicious host reference included within the covered JavaScript can vary, as the attacker usually controls it and may whenever modify it. Trojan:JS/BlacoleRef.CL's payload may differ, based on what the reference host delivers at the time of hijack. The combination of disguised JavaScript within a covered IFrame referencing a malicious host, and the malicious host itself, which is responsible for dynamically generated content attempting to exploit various vulnerabilities on the victim's computer are controlled and could be modified by an attacker at any time. This enables it to be highly adaptable to the needs of the attacker.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



ekb-meshiti_kz_2013-03-06_16-51-59.zip File name: ekb-meshiti_kz_2013-03-06_16-51-59.zip
Size: 71.83 KB (71836 bytes)
MD5: 358e911fdbe4aa00f11b91b5dd31ffe2
Detection count: 17
Mime Type: unknown/zip
Group: Malware file
Last Updated: March 6, 2013
21a699cc18316d1c7204a82798db60ea File name: 21a699cc18316d1c7204a82798db60ea
Size: 71.83 KB (71830 bytes)
MD5: 21a699cc18316d1c7204a82798db60ea
Detection count: 16
Group: Malware file
Last Updated: March 6, 2013
ekb-meshiti_kz_2013-03-06_17-06-21.zip File name: ekb-meshiti_kz_2013-03-06_17-06-21.zip
Size: 71.61 KB (71619 bytes)
MD5: 3754755ed333003e3207dc4353264a7a
Detection count: 15
Mime Type: unknown/zip
Group: Malware file
Last Updated: March 6, 2013
88e5fa21973d8b70cc793f0f3c2f811b File name: 88e5fa21973d8b70cc793f0f3c2f811b
Size: 71.64 KB (71647 bytes)
MD5: 88e5fa21973d8b70cc793f0f3c2f811b
Detection count: 14
Group: Malware file
Last Updated: March 6, 2013
ekb-meshiti_kz_2013-03-06_17-13-00.zip File name: ekb-meshiti_kz_2013-03-06_17-13-00.zip
Size: 71.62 KB (71628 bytes)
MD5: 06cd96818e908dbf7ea1de5bb5f994ec
Detection count: 10
Mime Type: unknown/zip
Group: Malware file
Last Updated: March 6, 2013
Loading...