MalAgent.G_2062 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious way. Trojans do not replicate or spread to other computers.
Process Related Changes
It creates the following mutex(es):
- "laoliudeza.eicp.net:520"
Network Activity
We observed the following DNS query/queries:
Registry Related Changes
It makes the following registry modifications to ensure infection after system reboot: - HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\softupnotify.exe = C:\\DocumentsandSettings\\AllUsers\\¡¸¿ªÊ¼¡¹²Ëµ¥\\Ç¿Ã?¦Ã?¶Ãâ€ÃƒËœÃ‚µÃ§Ã„Ãâ€Ãƒâ€°Ãƒ?µÄÈüþ.lnk
|
