Thursday, October 28, 2010

Trojan directs users to install Fake AV

Troj/JSAgent-J

Who is at risk?: Windows users
How to get rid of it: Please follow the instructions for removing Trojans.
For more information: What is Fake Anti-Virus?   

About this threat:

Troj/JSAgent-J is a malicious script that displays fake security warnings and scan results in order to trick users into installing fake security software, also known as fake AV.

Users are directed to pages containing Troj/JSAgent-J by social engineering techniques like search engine optimization as well as redirection from other compromised web pages.

Sophos products detect the fake AV installed via Troj/JSAgent-J-infected pages as Mal/Koobface-G.
The Trojan attempts to access to the following domains:

protection-foryou.com
ubershields<number>.com
ubershields<number>.net

more @ http://www.sophos.com/security/threat-spotlight/index.html#threat3

No comments:

Post a Comment