Home / malware

PDF

Trojan:Win32/Agent.gen!F

First posted on 29 November 2012.
Source: Microsoft

Aliases :

Trojan:Win32/Agent.gen!F is also known as Downloader-AFY (McAfee), Trojan-Downloader.Win32.Small.bse (Kaspersky), Trojan-Dropper.Agent (Ikarus), Win-Trojan/Pakes.1385 (AhnLab).

Explanation :

Trojan:Win32/Agent.gen!F is a detection for malware that runs additional malware. The additional malware is usually dropped as a file with a name designed to look like a valid system file.

In the wild, we have observed the following files dropped by Trojan:Win32/Agent.gen!F:

• iexplore.scr
• lsas.exe
• svhost.exe

The files may be dropped in any location on your computer.

The additional malware could be any of the attacker's choosing, and could include:

• Trojan:Win32/Hocomrac.A
• Backdoor:Win32/Beastdoor.DL
• PWS:Win32/QQRob
• Backdoor:Win32/Hupigon
• Worm:Win32/Autorun

Analysis by Jireh Sanico

Last update 29 November 2012

 

TOP