Spy-Agent.cm is a Trojan designed to gather userid/password information of online banks, keystrokes and screenshots and send to a remote site. Upon execution, the Trojan drops a dll file into the following filepath:
%SystemDir%\[random characters][random digits].dll
The following registry keys are added.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 midi1″ = (dll flepath)
The Trojan downloads the configuration files from the following site:
microcbs.com
More information can be found at this McAfee page.
Loading Comments...