Troj/Agent-HDN is a Trojan for the Windows platform.
When first run,Troj/Agent-HDN drops a file to
<Window>\avtapit.dll, which also detected as Troj/Agent-HDN
then run it.
Troj/Agent-HDN has the functionalities to:
-download a file from preconfigured URL then read new filenames from it.
-download files from preconfigured URL then run them, which files are detected as Mal/Generic-A
Troj/Agent-HDN installs a service named "MsWinSvc" and creates registry entries under HKLM\System\CurrentControlSet\Services\MsWinSvc
The following registry entry is created:
HKLM\Software\Microsoft\Internet Explorer\IECfg
WinName
MsWinSvc