Home Malware Programs Trojans Trojan-Dropper.Win32.Agent.aymt

Trojan-Dropper.Win32.Agent.aymt

Posted: November 19, 2009

Trojan-Dropper.Win32.Agent.aymt is a malicious Trojan horse that enters the computer while the user is unaware and downloads corrupt files from Internet. Victims have reported that once this malicious virus is active can block all programs on the computer, even Internet Explorer. The user will then be bombarded by fake system scan messages which claim the computer needs an anti-virus program to run smoothly again. Do not fall for these blatant lies and remove Trojan-Dropper.Win32.Agent.aymt immediately.

Aliases

Trojan-Dropper.Agent (Ikarus)
Dropper/Agent.363520.D (AhnLab)

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %AppData%\Microsoft\Word\Lucene.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E9B1FB08-BA8C-4CDA-AF62-54FF3BAF941D}\VersionIndependentProgID][HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{EAA3F1FF-F1CC-46BF-85FA-197EEBF3B524}][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9B1FB08-BA8C-4CDA-AF62-54FF3BAF941D}]
Loading...