Home Malware Programs Trojans Trojan.Win32.Agent.derp

Trojan.Win32.Agent.derp

Posted: January 5, 2010

Trojan.Win32.Agent.derp (also known as Win-Trojan/Agent.200000.G) is a malicious Trojan horse that may represent a high security risk for the compromised system or its network environment. Trojan.Win32.Agent.derp creates a startup registry entry and may display annoying fake alerts of malware payloads in order to persuade users into buying rogue antispyware products. Trojan.Win32.Agent.derp contains characteristics of an identified security risk and should be terminated immediately once detected.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Irmon\Parameters][HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Irmon\Security][HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Irmon][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Irmon\Parameters][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Irmon\Security][HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Irmon]
Loading...