Internet threat level: 1
Home→Descriptions→Trojan-Dropper.Win32.Agent.aga
Trojan-Dropper.Win32.Agent.aga
| Detected | Jan 11 2006 13:37 GMT |
| Released | Jan 11 2006 13:37 GMT |
| Published | Jan 24 2006 08:57 GMT |
Technical Details
This Trojan is designed to install other Trojan programs on the victim machine. The Trojan itself is a Windows PE EXE file approximately 295KB in size.
When launched, the Trojan installs the following file in the original Trojan folder:
<original Trojan folder>\dropped.dll
This file will be detected by Kaspersky Anti-Virus as Trojan-PSW.Win32.Delf.he
This file is registered in the system registry, and launched for execution.
Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.
This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).
Such programs are used by hackers to:
- secretly install Trojan programs and/or viruses
- protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.
Trojan-Dropper.
- Trojan.
Generic. 5143590 (BitDef7) - Trojan.
DR. Agent. XEM (VirusBuster) - Win32:
Malware-gen (AVAST) - Trojan-Dropper.
Agent (Ikarus) - Dropper.
Agent. AJN (AVG) - DR/Agent.
GN (AVIRA) - Dropper.
Agent. cd (Rising) - Trojan-Dropper.
Win32. Agent. aga [AVP] (FSecure) - Trojan.
DR. Agent. XEM (VirusBusterBeta)
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.