Troj/Agent-ABXE

Category: Viruses and Spyware Protection available since:22 May 2013 13:10:29 (GMT)
Type: Trojan Last Updated:22 May 2013 13:10:29 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-ABXE exhibits the following characteristics:

File Information

Size
80K
SHA-1
503a7057e27f30434cde950813155cc94484d74b
MD5
142d395b98f66b79130a3392fafaebed
CRC-32
b9cb364d
File type
Windows executable
First seen
2013-04-05

Runtime Analysis

Copies Itself To
  • C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\nedpro0xz.exe
Dropped Files
  • C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\Desktop.ini
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    Taskman
    C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\nedpro0xz.exe
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    nepdro0xz
    C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\nedpro0xz.exe
Registry Keys Modified
  • HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell
    explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-91768\nedpro0xz.exe,Explorer.exe
DNS Requests
  • night.oneproxifier.com

download Try Sophos products for free
Download now