Analysis by: Erika Bianca Mendoza

 PLATFORM:

Windows 98, ME, NT, 2000, XP, Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan executes then deletes itself afterward.

  TECHNICAL DETAILS

File Size: 90 bytes
File Type: EXE
Memory Resident: Yes

Installation

This Trojan drops the following copies of itself into the affected system:

  • %UserTemp%\{random}.tmp

It executes then deletes itself afterward.

  SOLUTION

Minimum Scan Engine: 8.900

Step 1

For Windows XP and Windows Server 2003 users, before doing any scans, please make sure you disable System Restore to allow full scanning of your computer.

Step 2

Scan your computer with your Trend Micro product and note files detected as TROJ_AGENT.AUBN

Step 3

Restart in Safe Mode

[ Learn More ]


Did this description help? Tell us how we did.