MSIL/TrojanDownloader.Agent.HN [Threat Name] go to Threat
MSIL/TrojanDownloader.Agent.HN [Threat Variant Name]
| Category | trojan |
| Size | 44032 B |
| Detection created | Mar 21, 2013 |
| Detection database version | 8144 |
| Aliases | Trojan.MSIL.Agent.ahhy (Kaspersky) |
| TrojanDownloader:MSIL/Cryflas.C (Microsoft) |
Short description
MSIL/TrojanDownloader.Agent.HN is a trojan which tries to download other malware from the Internet.
Installation
The trojan does not create any copies of itself.
Other information
The trojan acquires data and commands from a remote computer or the Internet.
The trojan contains a list of (2) URLs. The HTTP protocol is used.
It tries to download several files from the addresses.
These are stored in the following locations:
- C:\Windows\svchost.exe
- C:\Windows\winlogon.exe
The trojan registers files as a system services.