First posted on 06 April 2007.
Source: SecurityHome
Trojan:W32/Agent.AFB is also known as Rootkit.Agent.H, Trojan.Win32.Agent.afb, TROJ_AGENT.VXZ, DR/Agent.afb.
Trojan:W32/Agent.AFB is a trojan with rootkit functionality.
Trojan:W32/Agent.AFB is a generic detection for trojans with rootkit technology that is usually associated with Adware programs.
Trojan:W32/Agent.AFB may drop .DLL , .SYS or .EXE files as its component. It typically drops its components in the following paths:
- Windows temporary folder
- Windows Directory
- Windows System Directory
- Program files directory
The dropped .SYS file is a driver that is use to hide some registry entries. This is done by hooking several APIs related to registry operations.
Last update 06 April 2007
TOP