VBA/TrojanDownloader.Agent.ZS [Threat Name] go to Threat

VBA/TrojanDownloader.Agent.ZS [Threat Variant Name]

Category trojan
Detection created Aug 11, 2015
Detection database version 12077
Aliases Trojan-Downloader.PDF.Agent.aw (Kaspersky)
  W97M.DownLoader.552 (Dr.Web)
  TrojanDownloader:O97M/Donoff (Microsoft)
Short description

VBA/TrojanDownloader.Agent.ZS is a trojan which tries to download other malware from the Internet.

Installation

The trojan does not create any copies of itself.

Other information

The trojan contains a URL address.


It tries to download a file from the address.


The file is stored in the following location:

  • %temp%\­ceece.exe

The file is then executed. The HTTP protocol is used.


Trojan requires the Microsoft Word to run.

Please enable Javascript to ensure correct displaying of this content and refresh this page.