Win32/Spy.Agent.OXB [Threat Name] go to Threat

Win32/Spy.Agent.OXB [Threat Variant Name]

Category trojan
Size 240128 B
Detection created May 25, 2016
Detection database version 13543
Aliases TrojanSpy:Win32/Skeeyah.A!rfn (Microsoft)
  Trojan.DownLoader21.63589 (Dr.Web)
Short description

Win32/Spy.Agent.OXB is a trojan that steals sensitive information. The trojan attempts to send gathered information to a remote machine.

Installation

The trojan does not create any copies of itself.

Information stealing

The trojan collects the following information:

  • operating system version
  • information about the operating system and system settings
  • installed program components under  [HKEY_LOCAL_MACHINE\­SOFTWARE\­Microsoft\­Windows\­CurrentVersion\­Uninstall] Registry subkeys
  • amount of operating memory
  • CPU information
  • cookies
  • opened port number
  • the path to specific folders

The trojan attempts to send gathered information to a remote machine.


The trojan contains a URL address. The HTTP protocol is used.

Other information

The trojan then removes itself from the computer.

Please enable Javascript to ensure correct displaying of this content and refresh this page.