Full description

Virus:	TR/Drop.Agent.aeni
Date discovered:	17/08/2011
Type:	Trojan
Subtype:	Drop
In the wild:	No
Reported Infections:	Medium
Distribution Potential:	Low
Damage Potential:	Low
File size:	355217 Bytes
MD5 checksum:	4f0152f6800fcaf993eeb4af7f015b47
VDF version:	7.11.13.113 - Wednesday, August 17, 2011
IVDF version:	7.11.13.113 - Wednesday, August 17, 2011

General Method of propagation:
   • No own spreading routine

Aliases:
   • Kaspersky: RiskTool.Win32.BitCoinMiner.bx
   • Bitdefender: Trojan.Generic.8199325
   • AVG: BackDoor.Generic15.BPGV
   • Eset: Win32/HiddenStart.A application
   • Norman: W32/BitCoinMiner.K

Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7

Side effects:
   • Drops a malicious file

Files – Temporary files that might be deleted afterwards:
• %temp%\aaa\__tmp_rar_sfx_access_check_%random character string%
• %temp%\aaa\hsbca.exe

– %temp%\aaa\mamatije2.exe Furthermore it gets executed after it was fully created. Further investigation pointed out that this file is malware, too.
– %temp%\aaa\3kal.cmd Furthermore it gets executed after it was fully created.

Miscellaneous Checks for an internet connection by contacting the following web site:
• x.**********ners.in

說明撰寫者 Wensin Lee 開啟 2013年1月29日星期二
說明更新者 Wensin Lee 開啟 2013年1月29日星期二

返回 . . . .

需要修復電腦？

我的帳戶