Troj/Agent-YWE

Category: Viruses and Spyware Protection available since:16 Nov 2012 19:59:17 (GMT)
Type: Trojan Last Updated:16 Nov 2012 19:59:17 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-YWE exhibits the following characteristics:

File Information

Size
66K
SHA-1
1d0092f328e81cf8f3f21386c6c48273959960be
MD5
c019e0dfe3793256706ffb04f5b73dd8
CRC-32
8af7fed4
File type
Windows executable
First seen
2011-06-27

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\sarnytepsiri.exe
Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    sarnytepsiri
    c:\Documents and Settings\test user\sarnytepsiri.exe
  • HKCU\Software\Microsoft\Windows\CurrentVersion
    sarnytepsirizap
    □□□@□□□□□□□□ □□□□□`□□□□□
DNS Requests
  • 0handicap.at
  • 0risiko.de
  • 4dbenelux.be
  • 4esports.eu
  • 4events.at
  • 4ever4you.de
  • 4everevents.nl
  • 4everflashlight.de
  • 4everkids.de
  • 4everphp.de
  • 4eversoft.hu
  • 4everyone.nl
  • 7atable.be
  • 9online.fr
  • 9t6grafikdesign.de
  • accountingtechs.biz

download Try Sophos products for free
Download now