Win32/Spy.Agent.OND [Threat Name] go to Threat

Win32/Spy.Agent.OND [Threat Variant Name]

Category trojan
Size 118272 B
Detection created Nov 19, 2014
Detection database version 10750
Aliases Infostealer (Symantec)
Short description

Win32/Spy.Agent.OND is a trojan that steals sensitive information. The trojan attempts to send gathered information to a remote machine.

Installation

The trojan does not create any copies of itself.

Information stealing

The trojan collects the following information:

  • e-mail messages
  • e-mail addresses
  • e-mail accounts data
  • mail program used to send e-mails
  • computer name
  • MAC address
  • country

The following programs are affected:

  • Microsoft Outlook

The collected information is stored in the following file:

  • %appdata%\­png32.xml

The trojan attempts to send gathered information to a remote machine.


The trojan contains a URL address. The HTTP protocol is used.


The trojan then removes itself from the computer.

Please enable Javascript to ensure correct displaying of this content and refresh this page.