Win32/Spy.Agent.OWY [Threat Name] go to Threat

Win32/Spy.Agent.OWY [Threat Variant Name]

Category trojan
Size 98304 B
Aliases Trojan-Downloader.Win32.Agent.hgsy (Kaspersky)
  TrojanSpy:Win32/Skeeyah.A!rfn (Microsoft)
Short description

Win32/Spy.Agent.OWY is a trojan which tries to download other malware from the Internet.

Installation

When executed, the trojan copies itself into the following location:

  • %localappdata%\­fupdate\­fupdate.exe

The trojan schedules a task that causes the following file to be executed repeatedly:

  • %localappdata%\­fupdate\­fupdate.exe

After the installation is complete, the trojan deletes the original executable file.

Other information

The trojan acquires data and commands from a remote computer or the Internet.


The trojan contains a URL address. The HTTP protocol is used in the communication.


The trojan tries to download a file from the Internet.


The file is stored in the following location:

  • %localappdata%\­fupdate\­fupdaten.exe

The file is then executed.


The trojan attempts to delete the following files:

  • %localappdata%\­fupdate\­fupdaten.exe
  • %localappdata%\­fupdate\­fupdatep.exe

Please enable Javascript to ensure correct displaying of this content and refresh this page.