Home / malware Trojan-Downloader:W32/Agent.BNF
First posted on 22 June 2007.
Source: SecurityHomeAliases :
Trojan-Downloader:W32/Agent.BNF is also known as Trojan-Downloader.Win32.Agent.bnf, Win32/TrojanDownloader.Delf.NUA, W32/Agent.BOBD, Troj/Agent-FPT, Trojan.Downloader.Agent.BNF, TR/Dldr.Agent.bnf.1, Trj/Nabload.BEP, TROJ_AGENT.KTJ.
Explanation :
Trojan-Downloader:W32/Agent.BNF is part of a set of malware components related to Trojan-Downloader:W32/Murlo.FI.
Upon execution, this malware searches the following directories for executables detected as Trojan-Downloader:W32/Murlo.FI.
- %current directory%
- %root directory%
- %temp%
- %windir%/system32
When found, it will rename the executables to either "ieupdater.exe" or "ieupdate.exe". This effectively protects Trojan-Downloader:W32/Murlo.FI from being renamed to other filenames.
Last update 22 June 2007