Home Malware Programs Trojans Trojan.Agent.amjj

Trojan.Agent.amjj

Posted: May 27, 2009

Trojan.Agent.amjj typically infiltrates a system through the holes in the security, though sometimes it may be installed manually, without your knowledge or permission. Once installed, Trojan.Agent.amjj may compromise your machine further by downloading and installing additional malware onto your PC. Login and password information, as well as personal and financial data, is put at risk of being sent to a remote attacker to be used in identity theft.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %userprofile%\application data\microsoft\windows\cmp.stm
    2 %userprofile%\application data\microsoft\windows\lsass.exe
    3 %workingdir%\[RandomName].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MainHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
Loading...