Trojan_Clicker.JS.Iframe.fq

Technical Details
Payload
Removal instructions

Technical Details

This Trojan opens different web sites in the browser without the knowledge or consent of the user. It is an HTML page containing Java Script. It is 1358 bytes in size.

Payload

When the infected HTML page is opened in the browser, the Trojan downloads a web resource in a hidden frame. This resource is located at the following link:

http://www.ie***ta51.com/tds/in.cgi?default

At the time of writing, this link was inactive.

Removal instructions

If your computer does not have antivirus protection and has been infected by this malicious program, follow the instructions below to delete it:

1. Delete the original Trojan file (its location will depend on how the program originally penetrated the infected computer).
2. Empty the Temporary Internet Files directory, which contains infected files (see How to delete infected files from Temporary Internet Files folder?):

   %Temporary Internet Files%

3. Perform a full scan of the computer using Kaspersky Anti-Virus with up-to-date antivirus databases (download a trial version).

[MD5: 1553522c8755b1d19c94bb793ee27c09]
[SHA1: dd5fa97e35f7915b2a805a022f946436662832a8]