 |
W32/Agent.UF Trojan
| Name |
W32/Agent.UF Trojan |
| Aliases |
TROJ_RECHNUNG.A, Troj/Dloader-UC, Trojan-Downloader.Win32.Agent.uf |
| Discovered on |
September 12, 2005 |
 Virus Information - W32/Agent.UF Trojan:
W32/Agent.UF is an Trojan. The trojan will infect Windows systems and spreads through email.
This trojan arrives as an email attachment. The name of the infected attachment will be.
Ebay-rechnung.pdf.exe
Upon execution, the trojan copies itself as ipwf.exe in the Windows system folder.
It also drops winut.dat in the sub folder of %system%/driver folder.
It alters the windows registry at the following location to load itself during next startup;
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
The trojan connects to some of the websites in the pre-configured list to download a copy of W32/Goldun.A.
|
