XBlock By Actiance - Home
Someone Spying on You? Fight Back!
Currently Notice: Undefined variable: incprefix in /data/www/xblock/product_show.php on line 123 25,860,543 Spy Software Busted!
Full Name:
Type: Trojan
Also Known As: TrojanDownloader.Win32.Agent.ABM
Danger Level: 3
Category Description: Trojans are malicious applications that pose themselves as legitimate software in order to trick users to install them. Once on the victim's machine, it may run any number of malicious process to steal vital information or inflict damage to other software.
Comment: Troj/Agent.BA is a downloader trojan that downloads other threats.

Comes bundled with DCPlusPlus-0.668. DCPlusPlus-0.4032 also has this Trojan bundled in it.
When DCPlusPlus-0.668 is executed it generates cserv32.exe and ouapcker.exe. When ouapcker.exe is executed it creates a temp file and downloads ISTBar from slotch.com. Also it generates the following files.
%windir%\gripo32.exe ? A variant of ISTBar
%windir%\ouiast.exe ? On execution this file create webdir.dll which is detected as Webdir Adware

Back to the list of products removed by X-Cleaner

© Copyright 2003-2011, Actiance, Inc. All rights reserved.   Privacy Policy