TrojanDownloader.BMP.Agent
Details
TrojanDownloader.BMP.Agent.a
Also known as TrojanDownloader.BMP.Agent.a.
This TrojanDownloader expolits a vulnerability in MS Windows accessible during viewing BMP files.
To date Agent only affects Russian versions of MS Windows 2000.
Agent may cause email clients to close on other versions of Windows or in other operating systems.
Agent launches the UrlDownloadToFileA function and downloads another Trojan, Backdoor.Throd.a from the a1qwertya1.biz.ly site. Throd is saved on the c drive as \sys.exe and launched.
Read more about Throd.a
Related Posts