JS:Packed-AI

Trojan horse injected into hacked legitimate webpage.

Summary
Type	Trojan horse
Aliases	no other AV is detecting it
Platform	Java Script

Description:

JS:Packed-AI is a JavaScript Trojan horse, which is injected into the html code of attacked legitimate web pages. JS:Packed-AI is a new generation of JS:Packed-AB and has the same functions. The script is highly encrypted while the top layer is split into many chunks that are joined in the decoding phase. Under several layers of encryption there is code which redirects the user to malicious servers in China operated by the attackers. Viewing the infected web page results in the user's computer becoming infected.

Detection/Removal

The Trojan horse is detected as JS:Packed-AI [Trj] and avast! is able to both detect and block it. To protect your computer, update your VPS to the latest version. The Trojan horse can be removed only from local files, it cannot be removed from internet files without having the necessary privileges. If you find an infected server, please contact the webmaster with the above information.