Trojan-Dropper.Win32.Agent.bgn

Technical Details
Payload
Removal instructions

Technical Details

This Trojan installs other programs to the victim machine without the knowledge or consent of the user. It is a Windows PE EXE file. The file is 6,536 bytes in size.

Payload

This program is a Trojan constructor. Trojans which are constructed using this program will install other malicious software to the victim machine.

When launched, the Trojan displays the following dialogue box:

When the malicious user clicks on create, the constructor will create a file called Result.exe in its working directory. This file is a Trojan program. When this Trojan is launched, it will extract all files places within its body to the Windows temporary directory and launch them for execution.

Removal instructions

If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:

1. Use Task Manager to terminate the Trojan process.
2. Delete the original Trojan file (the location will depend on how the program originally penetrated the victim machine).
3. Delete the files the Trojan saved to the Windows temporary directory.
4. Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).