Threat Database Trojans Win32/Agent.SFM

Win32/Agent.SFM

By GoldSparrow in Trojans

Threat Scorecard

Ranking: 7,386
Threat Level: 100 % (High)
Infected Computers: 1,332
First Seen: August 31, 2012
Last Seen: August 22, 2023
OS(es) Affected: Windows

Win32/Agent.SFM is a Trojan that targets credentials used to log into websites designed by cybercriminals. Win32/Agent.SFM does not send a lot of information on recent activities on the compromised machine, but is picky in transferring the gathered data. While being run, Win32/Agent.SFM drops and executes infected files on the corrupted PC from a remote server and/or the web. Win32/Agent.SFM also modifies the Windows Registry by creating Registry entries. Win32/Agent.SFM collects confidential information and various data linked to the infected computer system.

SpyHunter Detects & Remove Win32/Agent.SFM

File System Details

Win32/Agent.SFM may create the following file(s):
# File Name MD5 Detections
1. %RANDOM CHARACTERS1%.dll
2. %Temp%\­flash_player_update.exe
3. %Commonappdata%\­ur
4. %Commonappdata%\­ur%RANDOM CHARACTERS2%
5. %CommonAppData%\­cf
6. file.exe 821d24bbf336886f225969ebc0867e18 0
7. file.dll 4799e330f3bf548d48f691935628fdd9 0
8. file.exe 380ed56089198a1c5d53e237a0306bdb 0

Registry Details

Win32/Agent.SFM may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\­SOFTWARE\­Microsoft\­Windows NT\­CurrentVersion\­Windows]

Trending

Most Viewed

Loading...