This malicious JavaScript may be downloaded from remote sites by other malware.It may arrive bundled with malware packages as a malware component.
It checks for a cookie on the affected system with an certain string as its index.If the said cookie is found, it inserts an iFrame tag into target Web sites.
When a user accesses a Web site with the malicious iFrame tag, they are redirected to a malicious URL that displays popup advertisements.
However, this malware needs its main component to execute its intended routines.


More...