English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

2006-08-27 22:49:18 · 2 answers · asked by erwin g 1 in Computers & Internet Internet

2 answers

It's a TROJAN

Troj/Agent-H is a Trojan dropper with an IRC backdoor.

The Trojan drops the following files to the Windows system folder:

msdtcvs.exe : socket proxy server
msievc.exe : http proxy server
msvdtc.exe : socket proxy server with encryption
mssvcv.exe : multipurpose Denial-of-Service tool

msievc.exe is detected by SAV as Troj/Delf-EA. The other three are all detected as Troj/Agent-H. All except mssvcv.exe are executed after being created.

Troj/Agent-H connects to an IRC server and joins a preconfigured channel in which it can be controlled by a remote attacker.

2006-08-27 22:53:02 · answer #1 · answered by Anonymous · 1 0

uk weatherman beat me to it...it's part of the Sophos Trojan. Get ye to a good scanner and anti virus program.

2006-08-28 05:56:26 · answer #2 · answered by PariahMaterial 6 · 0 0

fedest.com, questions and answers