Need help? Ask the community or hire an expert.
Go to Avira Answers
Date discovered:30/03/2011
In the wild:No
Reported Infections:Low to medium
Distribution Potential:Low
Damage Potential:Low to medium
Static file:Yes
File size:226.654 Bytes
MD5 checksum:c72b8a192b7159273eec12e1bec96d14
VDF version: - Wednesday, March 30, 2011
IVDF version: - Wednesday, March 30, 2011

 General Aliases:
   •  Kaspersky: Trojan.VBS.Agent.mb
   •  Sophos: Troj/Agent-QPR
     DrWeb: Trojan.MulDrop1.49511

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003

 Files  It deletes the following files:
   • %TEMPDIR%\RarSFX0\avb_1004.msi
   • %TEMPDIR%\10a700.msi

The following files are created:


It tries to execute the following file:

   • %SYSDIR%\msiexec.exe" /i "%TEMPDIR%\RarSFX0\avb_1004.msi

Description inserted by Petre Galan on Monday, May 23, 2011
Description updated by Petre Galan on Tuesday, May 24, 2011

Back . . . .