Malware type: Trojan

Aliases: Trojan.Win32.BHO.yw (Kaspersky), Spy-Agent.cf (McAfee), Trojan.Dropper (Symantec), TR/BHO.YW (Avira), Troj/Agent-GGN (Sophos),

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Description: 

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Malware Overview

This Trojan arrives as an attachment to email messages spammed by another malware or a malicious user. It may also be downloaded unknowingly by a user when visiting malicious Web sites.

This Trojan drops several files, which Trend Micro detects as TROJ_RUNDIS.H and TROJ_AGENT.ADCU. As a result, routines of the dropped Trojans are also exhibited on the affected system.

This Trojan also disables the Task Manager, making its detection and consequent removal difficult.

For additional information about this threat, see:
Solution
Technical Details

Description created: Nov. 20, 2007 8:37:39 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.