Home Malware Programs Trojans Troj/Agent-XNN

Troj/Agent-XNN

Posted: August 29, 2012

Threat Metric

Ranking: 118
Threat Level: 10/10
Infected PCs: 902,233
First Seen: August 29, 2012
Last Seen: October 17, 2023
OS(es) Affected: Windows

Troj/Agent-XNN is a Trojan that is used in a spammed-out malware attack. Troj/Agent-XNN spreads via spam email attachments. The fake email message pretends to be a Facebook notification that notifies the recipient he/she has been tagged by one of their friends in a newly uploaded photograph. The subject of the bogus email is 'Your friend added a new photo with you to the album'. The fraudulent Facebook email has a malicious file detected as Troj/Agent-XNN attached to it which is called '[New_Photo_With_You_on_Facebook_PHOTOID[RANDOM].zip'. The deceptive email attempts to trick PC users into opening the attached malicious .zip file which carries a Trojan infection named Troj/Agent-XNN. Once installed, Troj/Agent-XNN allows attackers to gain remote access and control over the affected PC.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



file.exe File name: file.exe
Size: 33.91 KB (33912 bytes)
MD5: a733e0c3c3621231b542864b450b50b4
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: September 3, 2012
%ALLUSERSPROFILE%\Local Settings\Temp\msiitu.cmd File name: msiitu.cmd
Size: 62.46 KB (62464 bytes)
MD5: 5f950b263c20bf28c37423256fb2281b
Detection count: 5
Mime Type: unknown/cmd
Path: %ALLUSERSPROFILE%\Local Settings\Temp
Group: Malware file
Last Updated: February 17, 2020
Loading...