W32/Agent.UF is an Trojan. The trojan will infect Windows systems and spreads through email.

This trojan arrives as an email attachment. The name of the infected attachment will be.

Ebay-rechnung.pdf.exe

Upon execution, the trojan copies itself as ipwf.exe in the Windows system folder.

It also drops winut.dat in the sub folder of %system%/driver folder.

It alters the windows registry at the following location to load itself during next startup;

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

The trojan connects to some of the websites in the pre-configured list to download a copy of W32/Goldun.A.

This worm first appeared on September 12, 2005.

 Other names of W32/Agent.UF Trojan:

This Worm is also known as TROJ_RECHNUNG.A, Troj/Dloader-UC, Trojan-Downloader.Win32.Agent.uf .