| Port No | 40421 |
| Service Name | Agent 40421 |
| RFC Doc | 0 |
| Protocol | TCP |
| Description | This virus arrives on the system as a Microsoft Agent Scripting Helper (MSH) file. It searches for other .MSH files in the folder where it originally executes in. It appends the last 36 lines of its code to found files. It creates the signature, # Candela in infected files, to avoid re-infecting them again. |
| Reference Link | Agent 40421 Trojan |
| Attack |
SOLUTION : Scan your system with Trend Micro antivirus and delete files detected as BAT_DANOM.A. To do this, Trend Micro customers must download the latest virus pattern file and scan their system. Other Internet users can use HouseCall, Trend Micro's online virus scanner. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.