Author Topic: HTML/ExpKit.Gen6  (Read 9092 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
HTML/ExpKit.Gen6
« on: June 19, 2016, 04:24:32 PM »
I found this on my laptop today and haven't found an answer searching online. If anyone knows what this is please let me know.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: HTML/ExpKit.Gen6
« Reply #1 on: June 19, 2016, 04:45:51 PM »
It is also known as Troj/JSDldr-GL
It is malware that can infect a system using an HTML script.

I suggest you follow these instructions > https://forum.avast.com/index.php?topic=53253.0

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: HTML/ExpKit.Gen6
« Reply #2 on: June 19, 2016, 09:45:24 PM »
This can be the downloader for ransomware ...

HTML/ExpKit.Gen6 is a Avira antivirus detection

Do you have avast and Avira installed?




« Last Edit: June 19, 2016, 09:48:51 PM by Pondus »

REDACTED

  • Guest
Re: HTML/ExpKit.Gen6
« Reply #3 on: June 21, 2016, 03:15:48 AM »
I have Avira free installed. Avira detects the virus only when I go to a particular bank website. Not at any other bank or any other website. It seems to kill the virus when I click remove, but it comes back when I go to that site again.

REDACTED

  • Guest
Re: HTML/ExpKit.Gen6
« Reply #4 on: June 21, 2016, 03:51:49 AM »
Also, it's only detected using IE 11. No detection with Firefox or Chrome

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: HTML/ExpKit.Gen6
« Reply #5 on: June 21, 2016, 07:47:25 AM »
Quote
Avira detects the virus only when I go to a particular bank website. Not at any other bank or any other website.
What website?



follow instructions here  https://forum.avast.com/index.php?topic=53253.0
we need Malwarebytes and Farbar Recovery Scan Tool logs, attach the logs, 3 logs total

see below the box you write in ... Attachments and other options


when done, a malware expert will assist you



« Last Edit: June 21, 2016, 07:49:54 AM by Pondus »

REDACTED

  • Guest
Re: HTML/ExpKit.Gen6
« Reply #6 on: June 21, 2016, 11:14:19 AM »
The site is USbank.com

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37547
  • Not a avast user
Re: HTML/ExpKit.Gen6
« Reply #7 on: June 21, 2016, 11:29:53 AM »
Cant see anything on the website using the normal web scanners, so it may be a Avira false positive
If so it can be reported here   >  https://analysis.avira.com/en/submit-urls

Quote
Also, it's only detected using IE 11. No detection with Firefox or Chrome
probably a IE bug
Anyway, the malware expert will find out if this is the case when he see the requested logs


« Last Edit: June 21, 2016, 11:31:44 AM by Pondus »