Home Malware Programs Trojans Proxy.Agent

Proxy.Agent

Posted: January 8, 2010

Threat Metric

Ranking: 9,904
Threat Level: 8/10
Infected PCs: 14,854
First Seen: January 8, 2010
Last Seen: February 28, 2025
OS(es) Affected: Windows

Aliases

Trj/CI.A [Panda]SHeur3.AMQO [AVG]Gen.Variant.Backdoor [Ikarus]TR/Dropper.Gen [AntiVir]Trojan.Generic.4672517 [BitDefender]Trojan-Proxy.Win32.Agent.cyq [Kaspersky]Trojan.Gen [Symantec]W32/MalwareF.HIVF [F-Prot]a variant of Win32/Injector.CLG [NOD32]Riskware [K7AntiVirus]PWS-Zbot.gen.fb [McAfee]TrojanProxy.Agent.cyq [CAT-QuickHeal]Generic Trojan [Panda]Generic17.BCQN [AVG]W32/Agent.DFB!tr [Fortinet]
More aliases (78)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\cpx\trzFD55.tmp File name: trzFD55.tmp
Size: 641.53 KB (641536 bytes)
MD5: 0e4b8118206c712a191a74e817afee0e
Detection count: 1,089
File type: Temporary File
Mime Type: unknown/tmp
Path: C:\Program Files\cpx\trzFD55.tmp
Group: Malware file
Last Updated: December 23, 2021
%ALLUSERSPROFILE%\Application Data\acccore\sp.DLL File name: sp.DLL
Size: 73.21 KB (73216 bytes)
MD5: c2780d0cbbdca147cf7b459007d15a04
Detection count: 562
File type: Dynamic link library
Mime Type: unknown/DLL
Path: %ALLUSERSPROFILE%\Application Data\acccore
Group: Malware file
Last Updated: November 23, 2010
%WINDIR%\system32\scvhost.exe File name: scvhost.exe
Size: 393.21 KB (393216 bytes)
MD5: f2591def8b69fc59e5d1976cbd88dcf3
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: February 23, 2012
%PROGRAMFILES(x86)%\svcvmx\svcvmx.exe File name: svcvmx.exe
Size: 896 KB (896000 bytes)
MD5: cbb0ee8ae18ccba1b3d1d71ccda411d2
Detection count: 68
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\svcvmx
Group: Malware file
Last Updated: January 10, 2017
5492c6a2c1e09e5bebdaddbe2cda8fd3 File name: 5492c6a2c1e09e5bebdaddbe2cda8fd3
Size: 188.25 KB (188258 bytes)
MD5: 5492c6a2c1e09e5bebdaddbe2cda8fd3
Detection count: 42
Group: Malware file
Last Updated: February 18, 2022
file.exe File name: file.exe
Size: 169.98 KB (169984 bytes)
MD5: 64bf7e45fe2d46d3aad45506000ee6f4
Detection count: 3
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: October 13, 2017

More files

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%APPDATA%\Wplugin.dll%LOCALAPPDATA%\achpow.dll%LOCALAPPDATA%\acppow.dll%LOCALAPPDATA%\adiuxu.dll%LOCALAPPDATA%\aergsi.dll%LOCALAPPDATA%\alldpxf.dll%LOCALAPPDATA%\amling.dll%LOCALAPPDATA%\amxlte.dll%LOCALAPPDATA%\bguard.dll%LOCALAPPDATA%\bokaxiz.dll%LOCALAPPDATA%\cdmgee.dll%LOCALAPPDATA%\chadti.dll%LOCALAPPDATA%\dclink.dll%LOCALAPPDATA%\deryda.dll%LOCALAPPDATA%\dkproc.dll%LOCALAPPDATA%\dkstoj.dll%LOCALAPPDATA%\dolsaw.dll%LOCALAPPDATA%\dtorqu.dll%LOCALAPPDATA%\dxmlte.dll%LOCALAPPDATA%\emodem.dll%LOCALAPPDATA%\fasync.dll%LOCALAPPDATA%\fdloix.dll%LOCALAPPDATA%\fisirs.dll%LOCALAPPDATA%\gprocs.dll%LOCALAPPDATA%\gxxkey.dll%LOCALAPPDATA%\hiakbk.dll%LOCALAPPDATA%\host2lc.dll%LOCALAPPDATA%\iflitt.dll%LOCALAPPDATA%\lifefv.dll%LOCALAPPDATA%\lilodl.dll%LOCALAPPDATA%\Macromedia\TestApp.exe%LOCALAPPDATA%\mpawnd.dll%LOCALAPPDATA%\nillvzs.dll%LOCALAPPDATA%\ofixiz.dll%LOCALAPPDATA%\ofxduo.dll%LOCALAPPDATA%\oldsep.dll%LOCALAPPDATA%\opmild.dll%LOCALAPPDATA%\optdbb.dll%LOCALAPPDATA%\osmixa.dll%LOCALAPPDATA%\peidsa.dll%LOCALAPPDATA%\peidso.dll%LOCALAPPDATA%\pfialx.dll%LOCALAPPDATA%\pkunze.dll%LOCALAPPDATA%\roufac.dll%LOCALAPPDATA%\saaeix.dll%LOCALAPPDATA%\strght.dll%LOCALAPPDATA%\taoreg.dll%LOCALAPPDATA%\tguard.dll%LOCALAPPDATA%\ttrdbax.dll%LOCALAPPDATA%\uweprt.dll%LOCALAPPDATA%\vergsi.dll%LOCALAPPDATA%\vmmkey.dll%LOCALAPPDATA%\wayout.dll%LOCALAPPDATA%\waysot.dll%LOCALAPPDATA%\wisdom.dll%LOCALAPPDATA%\wndplt.dll%LOCALAPPDATA%\xenlab.dll%LOCALAPPDATA%\ziarib.dll%LOCALAPPDATA%\zilimu.dll%WINDIR%\Wplugin.dllHKEY..\..\..\..{RegistryKeys}SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\vsgliig

Additional Information

The following directories were created:
%PROGRAMFILES%\svcvmx%PROGRAMFILES(x86)%\svcvmx

Related Posts

Loading...