Home Malware Programs Trojans Agent_r.aks

Agent_r.aks

Posted: October 4, 2011

Agent_r.aks is a critical Trojan which may lead your PC to serious damage. Agent_r.aks is able to enter the targeted computer system secretly, and creates its startup registry entry to run each time you start your PC. Once installed, Agent_r.aks creates some system files and changes Internet connection settings without a computer user's knowledge. Agent_r.aks can also hijack your web browser and redirect you to unwanted and malicious websites. You should uninstall Agent_r.aks immediately after detection.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%Users%\kb\AppData\Local\Conduit File name: %Users%\kb\AppData\Local\Conduit
%Users%\kb\AppData\Roaming\UD22oonF4pm File name: %Users%\kb\AppData\Roaming\UD22oonF4pm
%Users%\kb\AppData\Roaming\orrzzPPNyxAuv2 File name: %Users%\kb\AppData\Roaming\orrzzPPNyxAuv2

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths "%ProgramFiles%\PopinMV\PopinMVUpdate"

Related Posts

Loading...