Troj/Agent-ZFP

Category: Viruses and Spyware Protection available since:08 Dec 2012 14:56:20 (GMT)
Type: Trojan Last Updated:08 Dec 2012 14:56:20 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-ZFP exhibits the following characteristics:

File Information

Size
221K
SHA-1
a29466cc49b29e925cd3c061e162ee933add4bb4
MD5
1f04bb2ad6ad348b108fb31dcae285ee
CRC-32
54f6989e
File type
Windows executable
First seen
2011-06-27

Runtime Analysis

Dropped Files
  • C:\WINDOWS\system32\ntkrll32.dll
    Size
    59K
    SHA-1
    08d4f25584007d576d097190d1ce4dc5c7dc1ff7
    MD5
    7e33f0754ac75a4a8523ffa2eb286526
    CRC-32
    02b2fc4b
    File type
    Windows executable
    First seen
    2012-12-03
Registry Keys Created
  • HKCU\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing\F05EEEEE-8F65-A215-9924-33F6DD98178A
    Group
    0x0000049c
Processes Created
  • c:\windows\system32\attrib.exe
  • c:\windows\system32\cmd.exe

download Try Sophos products for free
Download now