Trojan Agent – 0jsa3vc.bat – 5bfaa8ef5b082f1bdee126beb9a38b66

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Trojan Agent
Also known as: Worm Autorun, Trojan Downloader.Generic
SHA256: d39e3625f673ba25accb4bb514e7a50cc95944dc2e89c6579206b9c19ca0dfb9
SHA1: afdaf0a3d697a06a3442b3be779689f741df9d51
MD5: 5bfaa8ef5b082f1bdee126beb9a38b66
File size: 78336 bytes

Created files:

%AppData%\0jsa3vc.bat – Trojan Agent
%AppData%\ctyfa4.exe – Trojan Agent
%AppData%\na5y.bat – Trojan Agent
%AppData%\qn01.inf – Trojan Agent

Trojan Agent created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\zn7ex3e: %AppData%\ctyfa4.exe
HKLM\System\CurrentControlSet\Services\ctyfa4\Type: 10010000
HKLM\System\CurrentControlSet\Services\ctyfa4\Start: 02000000
HKLM\System\CurrentControlSet\Services\ctyfa4\DisplayName: ctyfa4
HKLM\System\CurrentControlSet\Services\ctyfa4\ImagePath: %AppData%\0jsa3vc.bat

Leave a Reply