Win32/Agent.SPP [Threat Name] go to Threat

Win32/Agent.SPP [Threat Variant Name]

Category trojan
Size 566272 B
Detection created May 25, 2011
Detection database version 6150
Aliases Trojan-Spy.Win32.Delf.aaxz (Kaspersky)
  Trojan:Win32/Malagent (Microsoft)
  TSPY_BANKER.SMY (TrendMicro)
Short description

Win32/Agent.SPP is a trojan that steals sensitive information. It can send various information about the infected computer to an attacker.

Installation

The trojan does not create any copies of itself.

Information stealing

The trojan collects the following information:

  • computer name
  • network adapter information
  • Outlook Express account data
  • e-mail addresses

E-mail addresses are searched for in files with one of the following extensions:

  • .dbx
  • .eml
  • .mai
  • .mbox
  • .mbx
  • .tbb
  • .wab

The trojan sends the information via e-mail. The trojan contains a list of (2) addresses.

Other information

The trojan creates the following files:

  • delexec.bat

The file is then executed.

Please enable Javascript to ensure correct displaying of this content and refresh this page.