JS/Dldr.Remora.WA - Malware

See also

Summary

Full description

Statistics

Virus:	JS/Dldr.Remora.WA
Date discovered:	28/03/2008
Type:	Exploit
Subtype:	Downloader
In the wild:	Yes
Reported Infections:	Low
Distribution Potential:	Low
Damage Potential:	Low
Static file:	No
IVDF version:	7.00.03.88 - Fri, 28 Mar 2008 08:41 (GMT+1)

General Method of propagation:
   • No own spreading routine

Aliases:
   • Kaspersky: Trojan-Downloader.JS.Remora.W
   • F-Secure: Trojan-Downloader.JS.Remora.W
   • Sophos: Mal/ObfJS-R
   • Grisoft: Downloader.Agent

Side effects:
   • Downloads a malicious file

Backdoor Contact server:
The following:
• http://update2.classictel.org/**********

This is done via the HTTP GET request on a PHP script.

See a brief description here.

Description inserted by Thomas Wegele on Fri, 28 Mar 2008 07:44 (GMT+1)
Description updated by Thomas Wegele on Mon, 31 Mar 2008 13:08 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back