Skip to main content

Trojan:W32/Agent.EDY

Classification

Category:

Malware

Type:

Trojan

Aliases:

  • Trojan:W32/Agent.EDY

Summary

Trojan:W32/Agent.EDY is a standalone trojan dropper. It drops two EXE files on the computer.

Removal

Technical Details

Trojan:W32/Agent.EDY is detection of a trojan-dropper which is packed with a modified version of UPX file compressor.It drops two EXE files to the user's computer.The first file named Regscan.exe is dropped to the following location:

  • C:\windows\system32\regscan.exeSHA1: 28c80315dfa691f1fb0b5b5cf3a253e416541f53

It also drops a 3Kb sized file that is named the same as the sample itself to:

  • C:\Documents and Settings\[UserName]\Local Settings\Temp\

Registy ChangesLaunch point:

  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Regscan

Add these value to registry:

  • HKCU\Software\Microsoft\Internet Explorer\Settings\GID
  • HKCU\Software\Microsoft\Internet Explorer\Settings\GatesList
  • HKCU\Software\Microsoft\Internet Explorer\Settings\KeyE
  • HKCU\Software\Microsoft\Internet Explorer\Settings\KeyM

Regscan.exe posts a file called bang.cgi to various IP addresses.

Protect your devices from malware with F‑Secure Total

Protecting your devices from malicious software is essential for maintaining online security. F‑Secure Total makes this easy, helping you to secure your devices in a brilliantly simple way.

  • Award‑winning antivirus and malware protection

  • Online browsing, banking, and shopping protection

  • 24/7 online identity and data breach monitoring

  • Unlimited VPN service to safe­guard your privacy

  • Password manager with private data protection

Choose how many devices you want to protect to get started.

  • Free customer support

  • Cancel anytime

  • The trial does not obligate you to buy the product

After 30 days your subscription will renew automatically for one year at €69.99.

More Support

Community

Ask questions in our Community.

User guides

Check the user guide for instructions.

Contact Support

Chat with with or call an agent.

Submit a Sample

Submit a file or URL for analysis.