MSIL/TrojanDownloader.Agent.DFV [Threat Name] go to Threat

MSIL/TrojanDownloader.Agent.DFV [Threat Variant Name]

Category trojan
Size 84992 B
Detection created Apr 13, 2017
Detection database version 15253
Aliases Trojan.Win32.Agent.nezpso (Kaspersky)
Short description

MSIL/TrojanDownloader.Agent.DFV is a trojan which tries to download other malware from the Internet.

Installation

The trojan does not create any copies of itself.

Other information

The trojan contains a URL address.


It tries to download a file from the address. The HTTP, FTP protocol is used.


The file is stored in the following location:

  • C:\­Program Files\­system32.exe

The following Registry entries are set:

  • [HKEY_LOCAL_MACHINE\­SOFTWARE\­Microsoft\­Windows\­CurrentVersion\­Run]
    • "System" = "C:\­Program Files\­system32.exe"

This way the trojan ensures that the file is executed on every system start.


The trojan displays a fake error message:

  • V aplikaci došlo k neznámé chybě a bude ukončena !!!

Please enable Javascript to ensure correct displaying of this content and refresh this page.