Home Malware Programs Trojans Trojan-Downloader.Win32.Agent.cpnd

Trojan-Downloader.Win32.Agent.cpnd

Posted: November 16, 2009

Trojan-Downloader.Win32.Agent.cpnd is a Trojan program that is deceptively installed to download malware and unwanted software onto an unsuspecting victim's computer. Trojan-Downloader.Win32.Agent.cpnd may download adware, spyware or other malware from multiple servers on the Internet. Trojan-Downloader.Win32.Agent.cpnd poses a high risk to a PC's security. Trojan-Downloader.Win32.Agent.cpnd's symptoms include illicit network connections, self-mutation, disabling of security software and the installation of harmful malware. Trojan-Downloader.Win32.Agent.cpnd may also transmit personal information without your consent and severely compromise the performance of your computer. Remove this malicious malware immediately to prevent damage to the infected system.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %System%\RGR.SYS
    2 %System%\svchosste.exe
    3 %Temp%\RarSFX0\1.bat
    4 %Temp%\RarSFX0\loader.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]HKEY..\..\..\..{RegistryKeys}[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Driver\Security][HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Driver]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Loading...