Also detected as:
Alerts from your security software may be the only symptom.
detects and removes this threat.
This trojan can download other malware onto your PC.
It is installed by other malware, such as Exploit:SWF/CVE-2013-5330.A.
The following free Microsoft software detects and removes this threat:
Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.
You can also visit the Microsoft virus and malware community for more help.
TrojanSpy:Win32/Lurk is installed by other malware, such as Exploit:SWF/CVE-2013-5330.A.
It is installed with a random file name in %TEMP%, for example, %TEMP%\218c.tmp. This file is usually deleted the next time your PC is rebooted.
The trojan tries to download a portable executable file from a remote server and injects it into a web browser process. We have seen it contact the following domain:
Analysis by Chun Feng
Take these steps to help prevent infection on your PC.
I want to...
Note: Your feedback is very important to us, however we do not respond to individual submissions through this channel.
If you require support, please visit the
Safety & Security Center.