Trojan-downloader_win32_agent.nmi

This updated guide examines Trojan-downloader_win32_agent.nmi and organizes the essential facts, background, and practical takeaways in clear American English.

Detection date: August 21, 2008

http://xanjan.cn/*****update.txt

This is a list of files that will be downloaded to your computer. This list file will be downloaded to the directory:

% Application Data% update.dat

The links in the file are encrypted. Trojans will then download the files from the link in the file and save them at:

% Application Data%.exe

is an acronym for random strings of numbers and letters, for example: m2zpp.exe , 43m66m.exe . After the files have been downloaded to the computer, they will start executing and then delete themselves. If the downloaded files are dll files, they will register themselves to the system registry and be started every time the system works. After the distribution has been completed, the original Trojan deletes itself from the victim's computer. Instructions for removal a complete antivirus solution, follow these instructions to remove malicious code from your computer: 1. Delete the original Trojan file (file location depends on how it originally entered the victim computer). 2. Update the virus database and perform a full computer scan.