Home Malware Programs Trojans Trojan:JS/Reveton.A

Trojan:JS/Reveton.A

Posted: January 25, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 8
First Seen: January 25, 2013
OS(es) Affected: Windows

Trojan:JS/Reveton.A is a JavaScript Trojan that uses a legitimate system file to start Trojan:Win32/Reveton of the ransomware family known as Reveton. Trojan:JS/Reveton.A is detected as a JavaScript file that is downloaded by variants of Trojan:Win32/Reveton, and is used as component of the their installation process. Trojan:JS/Reveton.A is usually downloaded by Trojan:Win32/Reveton in the '%ALLUSERSPROFILE%\Application Data' folder with a file name that is the reverse of the name of its dropper. The only function of Trojan:JS/Reveton.A is to use the legitimate system file 'rundll32.exe' to run the Trojan:Win32/Reveton dropper component.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file-5049366_js File name: file-5049366_js
Size: 2.95 KB (2959 bytes)
MD5: 663211fe4c0b16943d47affc65494c54
Detection count: 58
Group: Malware file
Last Updated: January 28, 2013
dsgsdgdsgdsgw.js File name: dsgsdgdsgdsgw.js
Size: 2.98 KB (2985 bytes)
MD5: d81cecf8c1af5a132b391424b047840c
Detection count: 57
File type: JavaScript file
Mime Type: unknown/js
Group: Malware file
Last Updated: January 28, 2013
ifgxpers.zip File name: ifgxpers.zip
Size: 30.23 KB (30231 bytes)
MD5: 9d3e76b5d6a37c2fea4c29242da44250
Detection count: 49
Mime Type: unknown/zip
Group: Malware file
Last Updated: January 28, 2013
antiv.zip File name: antiv.zip
Size: 1.17 MB (1173995 bytes)
MD5: 10659f01f2fad8dda4ebb35acab6640a
Detection count: 43
Mime Type: unknown/zip
Group: Malware file
Last Updated: January 28, 2013
%ALLUSERSPROFILE%\Application Data\erawlam.js File name: %ALLUSERSPROFILE%\Application Data\erawlam.js
File type: JavaScript file
Mime Type: unknown/js
Group: Malware file

More files
Loading...