Trojan-Clicker.Win32.Agent.bm

tag:Trojan   Clickers  

0 0

This is a primitive Win32 Trojan.

It is written in C, and packed using UPX. The packed file is approximately 14KB in size, and the unpacked file is approximately 54KB in size.

Once launched, the Trojan remains dormant for approximately 7 minutes. This is done on purpose, to attempt to hide its payload from the user.

The Trojan then causes a dialogue box headed 'Microsoft Windows - Security Alert'.

If the user clicks on the button "Process with select of protection software", the Trojan will launch Internet Explorer, directing it to an Internet resource containing Adware.

©Virus-Encyclopedia.com All Rights Reserved.