Virus Name: Troj.Netdex.A

Aliases: Backdoor.Netdex, Troj/Netdex-A

Netdex is a backdoor trojan, which downloads script files from the web site two.com.ru, runs them, and sends the results back to the web site. The first is a java script program, zshell.js others include a.com, netd.exe, o.js, installer.php, repost.html, and sh.php.

Simply visiting the above site can also infect you if your computer allows scripts to be run without prompting because the index page contains the same scripts. The web site is written in Russian but translates to, "Why did you get here? Enter password to begin." Typing in a password leads to more pages written in Russian.

Once per minute the trojan horse checks the web site for any commands and executes them if there are any.

Privacy	Copyright	About
Contact	Site Map	Blog Frog