Home Malware Programs Keyloggers TrojanSpy.Win32.Agent

TrojanSpy.Win32.Agent

Posted: March 28, 2006

TrojanSpy.Win32.Agent is a non-commercial application, designed for stealing information about the user, by logging his keystrokes and sending them to the attacker. It is very hard to detect and it can cost you a lot of valuable information. Some newer variants appeared from March, 2004 to August, 2004. Such application can also include some other desructive abilities, like 'backdoor' for example. It allows the intruder to gain full control over your computer.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 mfcexp.exe
    2 ntlogon.exe
    3 svcbak.exe
    4 svchost.dll
    5 trojanspy.win32.agent.d.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunmfcexpunsvcbak

Related Posts

Loading...