Trojan-Dropper.Agent.ane

Posted: May 6, 2007

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	19,042
Threat Level:	9/10
Infected PCs:	234

First Seen:	July 24, 2009
Last Seen:	January 6, 2025
OS(es) Affected:	Windows

Trojan-Dropper.Agent.ane is a backdoor and Trojan dropper that can install additional malicious software, create serious security weaknesses on your PC and steal passwords and other forms of personal information. Even though Trojan-Dropper.Agent.ane was positively-identified as a PC threat in 2008, Trojan-Dropper.Agent.ane remains in circulation and can be a danger to any PC. SpywareRemove.com malware researchers advise residents of China, the United States, Japan and India to be especially-wary of possible Trojan-Dropper.Agent.ane infections, since these countries are most targeted by Trojan-Dropper.Agent.ane attacks as of 2011. Although Trojan-Dropper.Agent.ane may not show overt symptoms of its attacks, Trojan-Dropper.Agent.ane's presence should always be considered a high-level privacy and security risk for your computer. Removal of Trojan-Dropper.Agent.ane, as is also the case with other types of advanced Trojans, should utilize competent PC security software whenever such software is available.

Trojan-Dropper.Agent.ane – Not the Freshest Threat on the Block (but Still a Potent Threat)

Trojan-Dropper.Agent.ane, despite its age, remains propagated throughout the Internet, particularly in the United States and China. Trojan-Dropper.Agent.ane can be accurately-classified as either a Trojan dropper or a backdoor Trojan since Trojan-Dropper.Agent.ane serves functions that map to all three categories. Unfortunately, the visible symptoms of a Trojan-Dropper.Agent.ane attack may be negligible or nonexistent, which places importance on the availability of anti-malware products to find Trojan-Dropper.Agent.ane when Trojan-Dropper.Agent.ane first infects a PC. Risks from an active Trojan-Dropper.Agent.ane infection can include:

Criminal access to (and consequential control over) your PC by remote criminals. Trojan-Dropper.Agent.ane may install servers on your PC that assist with this attack or reduce security-related settings to make remote access less difficult than it would ordinarily be.
Theft of personal information, particularly account passwords and information that's related to online games or financial institutions. After removing a Trojan-Dropper.Agent.ane infection, you may wish to change your passwords and account security questions to prevent any possibility of account break-ins by Trojan-Dropper.Agent.ane's criminal partners.
The presence of varied types of additional PC threats, potentially-including rogue security programs, worms, keyloggers and similarly-malign applications.

Reliable Means of Disinfecting This Crooked Agent

Besides minor changes to the Windows Registry, and the presence of unusual .exe or .dll files, Trojan-Dropper.Agent.ane may not show much evidence of its existence on your PC. However, Trojan-Dropper.Agent.ane will attempt to launch itself automatically and remain active in the background to launch attacks against your computer's privacy and security. Appropriate removal methods for Trojan-Dropper.Agent.ane typically utilize anti-malware products to revert all of Trojan-Dropper.Agent.ane's changes without damaging Windows.

SpywareRemove.com malware researchers do note that Trojan-Dropper.Agent.ane hasn't been found to attack non-Windows computers. During a system scan, your security software may detect Trojan-Dropper.Agent.ane by a different name, depending on the brand of your software and the variant of Trojan-Dropper.Agent.ane in question. Some of Trojan-Dropper.Agent.ane's most well-used aliases include W32.Drom, PWS.Generic5.OLS, Downloader.Generic6.WZ Trojan-Spy.Win32.Delf.abi, PWS-OnlineGames.f and Win32/PSW.OnLineGames.NBR.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

winwm.exe

File name: winwm.exe
Size: 25.82 KB (25823 bytes)
MD5: baff098613991208b7f107febc494d59
Detection count: 73
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

jziins.exe

File name: jziins.exe
Size: 11.79 KB (11791 bytes)
MD5: 83bb9c7c55395edc95c9773195405e56
Detection count: 66
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

fyeins.exe

File name: fyeins.exe
Size: 11.3 KB (11304 bytes)
MD5: f050b7cfadf8910b6d19b747b3b2540b
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

qjgins.exe

File name: qjgins.exe
Size: 12.09 KB (12097 bytes)
MD5: 8a1b469dc4bf2c2907f5563e2373ad69
Detection count: 55
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009

fjOs0r.dll, OnlO0r.dll

File name: fjOs0r.dll, OnlO0r.dll
Size: 15.76 KB (15762 bytes)
MD5: 4659002858fef4ec54e43ff6e2afe2d9
Detection count: 35
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
Last Updated: December 11, 2009