TROJ_AGENT.AIJA
ALIASES:
Trojan.Win32.Sasfis.vat (Kaspersky), Trojan:Win32/Remhead (Microsoft)
PLATFORM:
Windows 2000, Windows XP, Windows Server 2003
OVERALL RISK RATING:
DAMAGE POTENTIAL:
DISTRIBUTION POTENTIAL:
REPORTED INFECTION:
Threat Type: Trojan
Destructiveness: No
Encrypted: No
In the wild: Yes
OVERVIEW
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
It executes then deletes itself afterward.
However, as of this writing, the said sites are inaccessible.
TECHNICAL DETAILS
File Size:
Varies
File Type:
EXE
Memory Resident:
Yes
Initial Samples Received Date:
03 Nov 2009
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Installation
This Trojan executes then deletes itself afterward.
Other Details
This Trojan connects to the following possibly malicious URL:
- {BLOCKED}onskanzas.com
However, as of this writing, the said sites are inaccessible.