Win32/TrojanDownloader.Onkods [Threat Name] go to Threat

Win32/TrojanDownloader.Onkods.A [Threat Variant Name]

Category trojan
Size 25177 B
Detection created Aug 09, 2013
Detection database version 8668
Aliases Trojan.Win32.IRCbot.sn (Kaspersky)
  TrojanDownloader:Win32/Onkods.A (Microsoft)
  Downloader-FPX (McAfee)
Short description

Win32/TrojanDownloader.Onkods.A is a trojan which tries to download other malware from the Internet.

Installation

The trojan does not create any copies of itself.

Other information

The trojan contains a URL address.


It tries to download a file from the address.


The file is stored in the following location:

  • %temp%\­%variable%.exe

The file is then executed. The HTTP protocol is used.


A variable numerical value is used instead of %variable% .


The trojan may delete the following files:

  • %currentfolder%\­4g9hfqhf3h3f0q3hg0q4gh0q4g

The trojan may display the following message:

Please enable Javascript to ensure correct displaying of this content and refresh this page.