Trojan.Java.Agent.ak

Technical Details

This malware is a component of a Trojan, which downloads files from the Internet without the user's knowledge. It is a Java class file. It is 1644 bytes in size.

Payload

This malware is a component of a Trojan from the "Trojan-Downloader.Java.OpenConnection" family and it is a class file named "Unicode", which contains the "lopiyo" function. This function is designed to decrypt strings. During decryption the following matches are used between input and output symbols:

Input stream:

FDAuPL1tfqU8Vw/RpMGnJZ-lOdz52jIy9?hN7bxB=X4Tir:a3H0Yv6_meckE%Q#so.SC&WKg

Output stream:

0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ/.:_-?&=%#

Removal instructions

If your computer does not have antivirus protection and has been infected by this malicious program, follow the instructions below to delete it:

1. Delete the original Trojan file (its location will depend on how the program originally penetrated the infected computer).