Win32/PSW.Agent.NKL [Threat Name] go to Threat

Win32/PSW.Agent.NKL [Threat Variant Name]

Category trojan
Size 223880 B
Detection created Feb 20, 2009
Detection database version 10495
Aliases Trojan-PSW.Win32.Agent.lta (Kaspersky)
  Infostealer (Symantec)
  PWS:Win32/Stealer.M (Microsoft)
Short description

Win32/PSW.Agent.NKL is a trojan that steals passwords and other sensitive information. The trojan can send the information to a remote machine.

Installation

The trojan does not create any copies of itself.

Information stealing

The trojan collects information related to the following applications:

  • Google Talk
  • Internet Explorer
  • Live Messenger
  • Microsoft Outlook
  • Mozilla Firefox
  • MSN Messenger
  • No-Ip
  • Pidgin
  • Steam
  • Trillian

The trojan can send the information to a remote machine. The FTP protocol is used.


The trojan contains a list of (1) FTP addresses.

Other information

The trojan creates the following files:

  • %temp%\­u16event.html

Please enable Javascript to ensure correct displaying of this content and refresh this page.