Home Malware Programs Trojans Trojan-Spy.MSIL.Agent.eso

Trojan-Spy.MSIL.Agent.eso

Posted: August 9, 2011

Trojan-Spy.MSIL.Agent.eso is a terrible Trojan infection which performs malicious actions on the compromised computer system. Trojan-Spy.MSIL.Agent.eso propagates via unknown email attachments, instant messages or infected files downloaded online. Trojan-Spy.MSIL.Agent.eso can run automatically each time you start a computer until it's removed from the registry entry of the infected PC system. When Trojan-Spy.MSIL.Agent.eso is installed on a targeted machine, it can steal your personal information. You need to remove Trojan-Spy.MSIL.Agent.eso immediately to protect your computer from damage.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%AppData%\winlogin.exe File name: %AppData%\winlogin.exe
File type: Executable File
Mime Type: unknown/exe
%AppData%\Microsoft\winlogin.exe File name: %AppData%\Microsoft\winlogin.exe
File type: Executable File
Mime Type: unknown/exe
%Temp%\fox-babe.png File name: %Temp%\fox-babe.png
Mime Type: unknown/png
%Temp%\winlogin.exe File name: %Temp%\winlogin.exe
File type: Executable File
Mime Type: unknown/exe

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideoHKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\msvideo GoogleUpdate = "%AppData%\Microsoft\winlogin.exe"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\..{RunKeys}[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] Client = "Client1493"
Loading...