Trojan-PSW.Win32.Agent.acne

Posted: April 3, 2012

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	8,967
Threat Level:	2/10
Infected PCs:	2,565

First Seen:	April 3, 2012
Last Seen:	October 13, 2023
OS(es) Affected:	Windows

Trojan-PSW.Win32.Agent.acne is a Trojan that steals passwords and, in recent attacks, is installed along with other Trojans that perform similar functions. Because spyware-based PC threats like Trojan-PSW.Win32.Agent.acne rarely leave visible signs of their attacks, it's recommended for you to utilize appropriate security software to find and remove Trojan-PSW.Win32.Agent.acne before Trojan-PSW.Win32.Agent.acne can steal sensitive information. SpywareRemove.com malware researchers further warn that the latest Trojan-PSW.Win32.Agent.acne attacks have also involved concurrent installations of Trojan-Spy.Win32.Carberp.epm and Trojan-Spy.Win32.Varberp.epl, both of which can steal account passwords and bank-related information. All three of these PC threats are installed through hack attack-inserted exploits at the normally safe website radio-mowar.ru, and you should consider your PC potentially infected if you've had any contact with that site within the past month.

Trojan-PSW.Win32.Agent.acne: an Unappealing Name for an Account Thief with Partners

The coincidence in naming conventions aside, Trojan-PSW.Win32.Agent.acne is not only a blemish on the landscape of your PC and should always be considered a high-level threat to your PC both with respect to its security and its privacy. While Trojan-PSW.Win32.Agent.acne can be distributed by additional methods, its sole propagation point at the time of this writing is the radio-mowar.ru gaming site, a non-malicious site that was hacked and forced to host redirect attacks to multiple exploits. Since these exploits (technically IDed as CVE-2010-0188 and CVE-2011-3544) require JavaScript and Adobe PDF software to function, you can protect your browser from Trojan-PSW.Win32.Agent.acne attacks and related PC threats by disabling the above feature and software. Blocking the malicious go-between site that helps to enable these attacks, traffbiz.ru, can also help protect your PC.

The result of these exploits finishing their work is that your PC will be infected by three separate but very similar spyware-based Trojans: Trojan-PSW.Win32.Agent.acne, Trojan-Spy.Win32.Varberp.epl and Trojan-Spy.Win32.Carberp.epm. While SpywareRemove.com malware researchers note that Trojan-Spy.Win32.Carberp.epm prefers to attack and steal website account information for Citibank and Raiffeisen Bank, Trojan-PSW.Win32.Agent.acne can also be reconfigured for other targets, and targets for Trojan-PSW.Win32.Agent.acne and Trojan-Spy.Win32.Varberp.epl haven't yet been analyzed. As a general precaution, you should consider avoiding inputting personal information on any PC that you consider potentially infected with Trojan-PSW.Win32.Agent.acne or any of the other Trojans listed above.

How to Deal with Trojan-PSW.Win32.Agent.acne's Grubby Fingers on Your Accounts

Trojan-PSW.Win32.Agent.acne can't be trusted to provide visible indications of its attacks, and SpywareRemove.com malware researchers have also found that related PC threats are capable of code injection attacks that don't display unique memory processes for identification. Other than minor discrepancies in system resource usage and overall perform, you may not see any differences in your PC at all while Trojan-PSW.Win32.Agent.acne concerns itself with stealing private information, up to and potentially including your bank account passwords. Therefore, SpywareRemove.com malware researchers always recommend that you remove Trojan-PSW.Win32.Agent.acne and similar spyware-based Trojans by analyzing your computer with a good anti-malware program.

If you've recently disinfected Trojan-PSW.Win32.Agent.acne, Trojan-Spy.Win32.Varberp.epl or Trojan-Spy.Win32.Carberp.epm from your PC, you should consider contacting your bank and making other arrangements for re-securing all of your online accounts. Failing to protect your accounts from attacks by Trojan-PSW.Win32.Agent.acne and banking Trojans can result in account break-ins that steal money, destroy information or cause other forms of harm that aren't as easy to repair as your computer is to fix after a Trojan-PSW.Win32.Agent.acne attack.

Technical Details

Additional Information

The following URL's were detected:

tomoviesable.ru