MSIL/Agent.OFQ [Threat Name] go to Threat

MSIL/Agent.OFQ [Threat Variant Name]

Category trojan
Size 307096 B
Aliases MSIL.AFJN.trojan (AVG)
Short description

MSIL/Agent.OFQ is a trojan that installs JS/Iframe.IG malware.

Installation

When executed, the trojan creates the following files:

  • %localappdata%\­Google\­Chrome\­User Data\­Default\­Extensions\­akeegleenaondckknlhflmihfgkpbane\­1.9.7_0\­jQuery.js (274658 B)
  • %localappdata%\­Google\­Chrome\­User Data\­Default\­Extensions\­akeegleenaondckknlhflmihfgkpbane\­1.9.7_0\­manifest.json (618 B)
  • %localappdata%\­Google\­Chrome\­User Data\­Default\­Extensions\­akeegleenaondckknlhflmihfgkpbane\­1.9.7_0\­sedat.js (8553 B, JS/Iframe.IG)

The trojan does not create any copies of itself.


The trojan modifies the following file:

  • %localappdata%\­Google\­Chrome\­User Data\­Default\­Preferences
Other information

The following programs are terminated:

  • chrome.exe

The trojan launches the following processes:

  • chrome.exe

The trojan may display the following message:

Trojan requires the Microsoft .NET Framework to run.

Please enable Javascript to ensure correct displaying of this content and refresh this page.