Troj/eAgent-D is a spamming Trojan tool for the Windows platform, providing functionality to act as an email spam proxy.
Troj/eAgent-D is a spamming Trojan tool for the Windows platform, providing functionality to act as an email spam proxy.
Troj/eAgent-D includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/eAgent-D is installed the following files are created:
<System>\rsvp322.dll
<System>\sporder.dll
A clean copy of the Microsoft library DLL sporder.dll is installed to the Windows system folder and is used to register the Troj/eAgent-C DLL as a layered service provider (LSP), creating and modifying registry entries in the Winsock 2 system configuration database under:
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters