Troj/Agent-YWK

Category: Viruses and Spyware Protection available since:18 Nov 2012 00:07:07 (GMT)
Type: Trojan Last Updated:18 Nov 2012 00:07:07 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-YWK exhibits the following characteristics:

File Information

Size
296K
SHA-1
8e0ec44dcc8d12fd60031aba427de75d634f9fdd
MD5
f85d383be613f254e69384b5130aa760
CRC-32
007445c3
File type
Windows executable
First seen
2012-11-17

Runtime Analysis

Dropped Files
  • c:\Documents and Settings\test user\Local Settings\Temp\001.jpg
    Size
    3.6K
    SHA-1
    028ababdd6000d8fddadc88125543e372f35b43c
    MD5
    97742211a2b5b56596bc45e1e9f9887d
    CRC-32
    fa56aa98
    File type
    JPEG Interchange Format
    First seen
    2012-11-17
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    donx
    C:\Documents and Settings\All Users\Common Files\donx.exe
Processes Created
  • c:\windows\system32\cmd.exe
  • c:\windows\system32\rundll32.exe

download Try Sophos products for free
Download now