HTML/ExpKit.Gen6

Viruses and worms
1

I found this on my laptop today and haven’t found an answer searching online. If anyone knows what this is please let me know.

2

It is also known as Troj/JSDldr-GL
It is malware that can infect a system using an HTML script.

I suggest you follow these instructions > https://forum.avast.com/index.php?topic=53253.0

3

This can be the downloader for ransomware …

HTML/ExpKit.Gen6 is a Avira antivirus detection

Do you have avast and Avira installed?

4

I have Avira free installed. Avira detects the virus only when I go to a particular bank website. Not at any other bank or any other website. It seems to kill the virus when I click remove, but it comes back when I go to that site again.

5

Also, it’s only detected using IE 11. No detection with Firefox or Chrome

6
Avira detects the virus only when I go to a particular bank website. Not at any other bank or any other website.
What website?

follow instructions here https://forum.avast.com/index.php?topic=53253.0
we need Malwarebytes and Farbar Recovery Scan Tool logs, attach the logs, 3 logs total

see below the box you write in … Attachments and other options

when done, a malware expert will assist you

7

The site is USbank.com

8

Cant see anything on the website using the normal web scanners, so it may be a Avira false positive
If so it can be reported here > https://analysis.avira.com/en/submit-urls

Also, it's only detected using IE 11. No detection with Firefox or Chrome
probably a IE bug Anyway, the malware expert will find out if this is the case when he see the requested logs