Home / malware

PDF

Trojan:W32/Agent.A

First posted on 22 June 2010.
Source: SecurityHome

Aliases :

There are no other names known for Trojan:W32/Agent.A.

Explanation :

A trojan, or trojan horse, is a seemingly legitimate program which secretly performs other, usually malicious, functions. It is usually user-initiated and does not replicate.

Additional DetailsTrojan:W32/Agent.A redirects infected machines to specified advertisement websites, resulting in unwanted pop-up advertisements and banners being displayed on the machine.

Agent.A arrives on the system as an HTML script file, which is saved to the Temporary Internet Files directory.

Activity

Upon execution, Agent.A displays a blank web page to hide its actual content.

It attempts to bypass pop-up blockers such as the following:

€ Norton Internet Security popup blocker € Internet Explorer Popup blocker
It also adds the following cookie:

€ PayPopUpAds
This is used to track user's browsing habits.

Last update 22 June 2010

 

TOP