Exploit.Phel.Gen

( JS/Exploit-HelpXSite trojan )

SYMPTOMS:

The malicious code of this exploit injects its own code into a browser window and executes it, thus executing a remote script onto the current machine. Due to this fact, symptoms vary, and it is almost impossible for a normal user to detect this threat.
 

TECHNICAL DESCRIPTION:

This generic detection targets html files with malicious code that use of Microsoft Windows HTML Help ActiveX Control Cross-Domain Vulnerability
A patch is available from Microsoft here.

This detection covers modified variants of Exploit.HelpXSite.Gen combined with other types of exploits (DragDrop, Zonepass, etc).
 

Removal instructions:

Please let BitDefender disinfect your files.

ANALYZED BY:

Patrik Vicol ,virus researcher