MSIL/Agent.OFQ [Threat Name] go to Threat
MSIL/Agent.OFQ [Threat Variant Name]
| Category | trojan |
| Size | 307096 B |
| Aliases | MSIL.AFJN.trojan (AVG) |
Short description
MSIL/Agent.OFQ is a trojan that installs JS/Iframe.IG malware.
Installation
When executed, the trojan creates the following files:
- %localappdata%\Google\Chrome\User Data\Default\Extensions\akeegleenaondckknlhflmihfgkpbane\1.9.7_0\jQuery.js (274658 B)
- %localappdata%\Google\Chrome\User Data\Default\Extensions\akeegleenaondckknlhflmihfgkpbane\1.9.7_0\manifest.json (618 B)
- %localappdata%\Google\Chrome\User Data\Default\Extensions\akeegleenaondckknlhflmihfgkpbane\1.9.7_0\sedat.js (8553 B, JS/Iframe.IG)
The trojan does not create any copies of itself.
The trojan modifies the following file:
- %localappdata%\Google\Chrome\User Data\Default\Preferences
Other information
The following programs are terminated:
- chrome.exe
The trojan launches the following processes:
- chrome.exe
The trojan may display the following message:
Trojan requires the Microsoft .NET Framework to run.