Need help? Ask the community or hire an expert.
Go to Avira Answers
Virus:ADSPY/Alerter.A
Date discovered:26/10/2006
Type:Trojan
In the wild:No
Reported Infections:Low
Distribution Potential:Low
Damage Potential:Low
Static file:Yes
File size:34.304 Bytes
MD5 checksum:94271d3e09d9058b14ab5edc40d56035
VDF version:6.36.00.160
IVDF version:6.36.00.177 - Friday, October 27, 2006

 General Method of propagation:
   • No own spreading routine


Alias:
   •  Eset: Win32/Agent.NEG


Platforms / OS:
   • Windows 95
   • Windows 98
   • Windows 98 SE
   • Windows NT
   • Windows ME
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Registry modification


Right after execution the following information is displayed:


 Files It tries to executes the following file:

– Filename:
   • iexplore.exe http://www.2-antispyware.com

 Registry The following registry key is added in order to run the process after reboot:

– [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   • "sys32"="%malware execution directory%\%executed file%"

 File details Runtime packer:
In order to aggravate detection and reduce size of the file it is packed with the following runtime packer:
   • UPX

Description inserted by Monica Ghitun on Thursday, October 26, 2006
Description updated by Monica Ghitun on Monday, November 20, 2006

Back . . . .