Internet threat level: 1
Home→Descriptions→Trojan-Dropper.Win32.Agent.bot
Trojan-Dropper.Win32.Agent.bot
| Detected | Aug 13 2007 12:13 GMT |
| Released | Aug 13 2007 12:13 GMT |
| Published | Dec 14 2007 15:53 GMT |
Payload
Removal instructions
Technical Details
This Trojan is designed to install and launch other malicious programs on the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. It is 70656 bytes in size.
Payload
When launching, the Trojan extracts the following files from its body:
Kaspersky Anti-Virus as Trojan-PSW.Win32.LdPinch.bgj;
%Temp%\4571-1.jpg (15267 bytes in size)
These files are then launched for execution.
Removal instructions
If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
- Use Task Manager to terminate the Trojan process.
- Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
- Delete the following files:
%Temp%\pinch3.exe%Temp%\4571-1.jpg
- Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.
This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).
Such programs are used by hackers to:
- secretly install Trojan programs and/or viruses
- protect known malicious programs from being detected by antivirus solutions; not all antivirus programs are capable of scanning all the components inside this type of Trojans.
Trojan-Dropper.
- Trojan:
MultiDropper-JD (McAfee) - Mal/Generic-A (Sophos)
- Trojan.
Dropper-2540 (ClamAV) - Heuristic.
WinPE-Statistical (Panda) - W32/Trojan.
BSPL (FPROT) - PWS:
Win32/Ldpinch. gen!A (MS(OneCare)) - Trojan.
MulDrop. 7963 (DrWeb) - Win32/TrojanDropper.
Delf. NRZ trojan (Nod32) - Trojan.
Dropper. Agent. BOT (BitDef7) - Trojan.
DR. Agent. JLDL (VirusBuster) - Trojan.
MulDrop (Ikarus) - Dropper.
Generic. NOT (AVG) - TR/Dropper.
Gen (AVIRA) - Infostealer (NAV)
- Agent.
OILW (Norman) - Trojan.
PSW. Win32. LdPinch. bgj (Rising) - Trojan-Dropper.
Win32. Agent. bot [AVP] (FSecure) - TROJ_Generic.
DIT (TrendMicro) - Trojan.
Malware (Sunbelt) - Trojan.
DR. Agent. JLDL (VirusBusterBeta)
© 1997-2013 Kaspersky Lab ZAO. All Rights Reserved.
Industry-leading Antivirus Software.
Registered trademarks and service marks are the property of their respective owners.
The authors' opinions do not necessarily reflect the official positions of Kaspersky Lab.