W32/Agent.AJN Trojan

 Information about the W32/Agent.AJN Trojan:

W32/Agent.AJN is a trojan. This trojan arrives as a spammed email message and it infects Windows systems.

The subject of the infected mail will be I miss you so much!?.

The body of the infected mail will be any one of the following;

Hello
I miss you so much.
Why don't you call and write me?
My body is waiting for your petting and love.
I want you to rape me with your big pennis.
I am still waiting for you.
Please call me by this tel. number: 8543564
You asked me to send my sexual erotic photos.
I send you them in an archive protected by password: 111
Please don't show them to your friends and to your cadet.
Send me your photos too.
Kisses.


--
Best regards,
(random name) (random email address)

> Hello.
> I love you with all my heart and soul.
> I miss you so much.
> I send you my photo. Please do not show it to your family and friends.
> Many kisses, Your Love.

HI
Super nice foto :))) tell me: 8271740

--
Best regards,
(random name) (random email address)

The name of the infected attachment will be dc00(random two digit number).jpg.zip file. The zip file contains an executable file with number of dashes ( ___ ).

Upon execution, the trojan downloads following files from http://www.e{blocked}21.net/flash/menu.swf website in C:\ drive to load itself during each startup.

autoexec.exe
io.exe
ntldr.exe

This worm first appeared on June 27, 2006.

 Other names of W32/Agent.AJN Trojan:

This Worm is also known as TROJ_SMALL.AMB.