Home / malware Trojan-Downloader:W32/Agent.BTF
First posted on 13 June 2007.
Source: SecurityHomeAliases :
Trojan-Downloader:W32/Agent.BTF is also known as Trojan-Downloader.Win32.Agent.btf, Agent.btf, ContraVirus.
Explanation :
Trojan-Downloader.Win32.Agent.btf downloads and silently installs a well known Rogue antispyware application named ContraVirus 2.0.
It silently installs the ContraVirus application onto the infected machine.
It adds autorun launchpoints to:
- [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"Windows Update Svc"= - [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"Windows Updater Servc"
Malware location:
- %system32%xpuupdate.exe
Last update 13 June 2007