Threat Encyclopedia

Selected viruses, spyware, and other threats: sorted alphabetically

Win32/TrojanDropper.Agent.OIK

Aliases:Trojan-Dropper.Win32.Mudrop.fes (Kaspersky), Dropper.Generic_c.CGK (AVG) 
Type of infiltration:Trojan  
Size:730002 B 
Affected platforms:Microsoft Windows 
Signature database version:4437 (20090918) 

Short description

Win32/TrojanDropper.Agent.OIK is a trojan that installs Win32/Small.NGK , Win32/TrojanDownloader.VB.OFS and Win32/TrojanDropper.Delf.NPX malware.

Installation

The trojan does not create any copies of itself.

The trojan creates the following files:
  • %applicationpath%DATinit.exe (68608 B, Win32/TrojanDropper.Delf.NPX)
  • %applicationpath%DATLiveUpdate.exe (57344 B, Win32/TrojanDownloader.VB.OFS)
  • %applicationpath%DATQvod.exe (14731 B, Win32/Small.NGK)
  • %applicationpath%DAT%string1%Internet Explorer %string2%.lnk
The strings written in Chinese language are used instead of %string1-2%.

The files are then executed.

Other information

The trojan is usually bundled within installation packages of various legitimate software.