mhtml & Exploit-MhtRedirect Trojan
Tags:
For some reason the VirsScan warned me today that my blog entry 838 contains Exploit-MhtRedir.gen , which uses a MS IE security hole in the MHTML handling to redirect a webpage to a special site.
Whats interesting is that the post was made way before the trojan was created and it used the redirect mechanism without me knowing — must have been an automatic conversion that IE did when I tried to convert/copy from MHTML file.
The MHTML redirect is in the following format:
<A href=”mhtml:file://somefile.mht!http://newsite.com/”>