English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

Constructor.Win32.ESpy.bq

Detected Aug 06 2007 12:11 GMT
Released Aug 06 2007 12:11 GMT
Published Jan 18 2005 08:59 GMT

Technical Details

This Trojan program is a Windows PE EXE file, 10 KB or greater in size.

The Trojan is capable of downloading and launching files from the Internet on the victim machine. It also downloads a program from the AdWare class to the victim machine; this program then directs the Internet browser on the victim machine to a portal where other types of AdvWare and other versions of the Trojan will be downloaded to the infected system.


Bookmark and Share
Share
Constructor

Constructor programs are designed to create new viruses, worms, and Trojans. There are known Constructors for DOS, Windows, and macro platforms.

These programs generate malicious program source code, object modules, and/or malicious files.

Some Constructors have a standard Windows-type interface in which a menu is used to select the type of malicious program, self-encryption options, anti-debugging features, etc.


Aliases

Constructor.Win32.ESpy.bq (Kaspersky Lab) is also known as:

  • Trojan-Downloader.Win32.Agent.bq (Kaspersky Lab)
  • Trojan-Clicker.Win32.Agent.bq (Kaspersky Lab)
  • TrojanDownloader.Win32.Agent.bq (Kaspersky Lab)
  • Trojan: Generic Downloader.x!dzi (McAfee)
  • Troj/Dloader-XN (Sophos)
  • Trj/Downloader.BQN (Panda)
  • TrojanDownloader:Win32/Renos.gen!Z (MS(OneCare))
  • Trojan.Click.314 (DrWeb)
  • Win32/TrojanDownloader.Agent.BQ trojan (Nod32)
  • Trojan.Generic.528604 (BitDef7)
  • Win32:Dialer-DW [Trj] (AVAST)
  • Trojan-Dropper.Agent (Ikarus)
  • Downloader.Agent2.QYE (AVG)
  • TR/Crypt.XPACK.Gen (AVIRA)
  • Packer.Win32.Agent.bk [Suspicious] (Rising)
  • Trojan-Downloader.Win32.Agent.bq [AVP] (FSecure)