Trojans and other Virus Pests

audre · May 18, 2002 12:00 am

JS_EXCEPTION.GEN Aliases: Trojan.Seeker-based, HTML.VMExploit, JS.Exception.Exploit, EXCEPTION, EXCEPTION.GEN, Coolsite, Coolsite.A, JS/Coolsite.A Description: This Java Script (JS) Trojan changes the infected user's Internet Explorer startup page. One of this Trojan's samples (Coolsite samples) is a mass-mailer. It exploits security vulnerabilities in the Microsoft Virtual Machine. Some variants have non-destructive payloads that change the button caption, modify the appearance of Internet Explorer, and redirect links to a certain Web site. JS_EXCEPTION.GEN- Click here to find out more about this bugger
JS_NOCLOSE.E Aliases: TROJAN.NOCLOSE, JS.TROJAN.NOCLOSE, HTML.JSCRIPT.NOCLOSE Description: This nondestructive Java Script contains a list of URLs in its code. Upon execution, it opens several windows, each connecting to a URL listed in its body. It then hides the opened windows so that the infected user may not close these. JS_NOCLOSE.E - Click here to find out more

Article Comments

Jaqui ( posted at 12:00AM Wed, 29 May 2002

which is one and only reason I don't have java enabled on my browser. also it gets rid of those horrible pop-ups when surfing.

dboura ( posted at 12:00AM Sun, 14 July 2002

Actually various pop up killing software will handle most of them .. as they will stop the pop ups that contain them, yes it is usually the pop-up windows that contain the Javascript viruses. Hence why mine is always on. The few times I let them off .. I was hit with those viruses. The bad thing is that sometimes they flash in the html so fast that most if not all virus scanners sometimes won't catch them til after infection occurs. Usually on the redirecting pop-ups.