Sophos

Sophos blogs

Troj/Briss-B

Aliases
  • TrojanDownloader.Win32.Small.gl
Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Web browsing
Affected operating systems Windows
Characteristics
  • Drops more malware
Protection available since 9 September 2004 08:09:56 (GMT)
Detected by All Sophos products
Download Free virus scan
Download the Threat Detection Test
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Briss-B is a Trojan that installs software on a computer without the user's consent.

Troj/Briss-B arrives as an XPI (Cross Platform Installer) ZIP file named IST_NETSCAPE.XPI.ZIP. The ZIP file contains an EXE file named ISTINSTALL_NETSCAPE.EXE and a JavaScript file named INSTALL.JS.

The Trojan exploits a security hole in unpatched versions of Mozilla browsers to run the executable file.

The JavaScript file INSTALL.JS is automatically run by the browser. The file copies the EXE file to a Temporary folder and then runs it.

The EXE file is detected as Troj/Small-GL.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer