Win32/TrojanDownloader.Agent.QXN

Win32/TrojanDownloader.Agent.QXN is a bit of a mouthful for a Trojan's name, but the truth is that it is not exactly a Trojan horse. Another name for this infection is Worm:Win32/Gamarue.B which means that unlike genuine Trojans, this malware infection (which is a worm) can spread on its own, using removable flash drives like a mean of transportation from one computer to the other. Win32/TrojanDownloader.Agent.QXN also contacts a predestined server in order to download more files to install on the target computer. It might be configuration files or simply additional malicious programs.

Even though it has been mentioned that Win32/TrojanDownloader.Agent.QXN usually travels from a computer to a computer via removable storage devices, it can also spread as an attachment to spam email message. The spam email that carries Win32/TrojanDownloader.Agent.QXN usually has a subject line that tells the user about a canceled ACH payment (which in reality does not even exist. Naturally, if Win32/TrojanDownloader.Agent.QXN is installed, it configures the registry so that it could start automatically.

When Win32/TrojanDownloader.Agent.QXN is distributed via removable storage devices, the malware copies itself into the drive as "diskrun.exe". To make the installation start automatically whenever the drive is plugged into another computer Win32/TrojanDownloader.Agent.QXN also creates an autorun file for the diskrun.exe.

After the installation, just as it has been mentioned previously, Win32/TrojanDownloader.Agent.QXN contacts various servers to download more malicious files. The servers this worm contacts include serioslyfucked.ru, loshatemikontara551.ru, randomcrappy.com and karabasdbryak.eu, although the creators of this infection are quick to change the servers in order to avoid being tracked down.

The user infected has to remove Win32/TrojanDownloader.Agent.QXN from his computer to save his own system and to prevent the worm from spreading further on. Manual worm removal is an extremely challenging task, but you can always get yourself a computer safeguard tool that will terminate Win32/TrojanDownloader.Agent.QXN automatically. At the same time the program will check for other possible infections and you will be able to get rid of them all at once.