Exploit:JS/DonxRef.A

Exploit:JS/DonxRef.A Description

Type: Malware

Exploit:JS/DonxRef.A is a JavaScript object that builds shellcode. Exploit:JS/DonxRef.A may be embedded within other document files, such as harmful HTML files. Exploit:JS/DonxRef.A proliferates via infected websites or infected HTML content inserted into a spam emailExploit:JS/DonxRef.A may strive to exploit a number of vulnerabilities in Java, Windows and Adobe Flash Player to launch other malware infections on the affected PC. Exploit:JS/DonxRef.A may detect a component of a particular exploit kit referred to as 'KaiXin' or 'Gong Da'. If the computer system contains a vulnerable version of these software products, Exploit:JS/DonxRef.A downloads and runs arbitrary files. Exploit:JS/DonxRef.A checks if the machine is vulnerable to the following:

CVE-2011-3544

CVE-2012-0507

CVE-2012-1723

CVE-2012-4681

CVE-2012-5076

CVE-2012-1535

Exploit:JS/DonxRef.A also exploits a vulnerability in Microsoft XML Core Services patched with the issue of Microsoft Security Bulletin MS12-043, (CVE-2012-1889).

Technical Information

Screenshots & Other Imagery

SpyHunter Detects & Remove Exploit:JS/DonxRef.A

File System Details

Exploit:JS/DonxRef.A creates the following file(s):
# File Name MD5 Detection Count
1 ad.html b7300c8ebe8d1d88a083ba9a65638ee2 0
2 gif.html 87e801461496495c9990107c4cc25ac7 0
3 BbkYQV1.html 829b479c52b68a68c4397fb37f563f2f 0

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.