high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Protection available since | 6 January 2005 22:10:29 (GMT) |
| Last updated | 28 July 2005 08:26:35 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
You should also check your Internet Explorer settings using Tools|Internet options|General for any modifications made by the worm.
More Information
Troj/Agent-BN is a downloader Trojan for the Windows platform.
Troj/Agent-BN connects to a preconfigured internet site and downloads code. The downloaded code is specific to the country of the infected computer.
In addition Troj/Agent-BN alters the Internet Security zone for a preconfigured website by setting the following registry entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
Domains\63.219.181.7\http
2
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
Domains\search-soft.net\http
2
Troj/Agent-BN will not affect computers from certain countries, determined by the value of the following registry entry:
HKCU\Control Panel\International\
Geo
<Code>
If <Code> is one of these values the Trojan will not run:
203
241
70
59
75
7
5
29
88
130
137
140
141
152
247
|
