A Trojan.WinLNK.Agent (also Trojan:Win32/Startpage.OS) is the definition from Kaspersky Labs of a Trojan downloader, Trojan dropper, or Trojan spy.
Its first known detection goes back to May 31, 2011, according to Microsoft Malware Protection Center. This Trojanware opens up an Internet Explorer browser to a predefined page (like to i.163vv.com/?96). Trojan Files with the LNK extension (expression) is a Windows shortcut to a malicious file, program, or folder. A LNK file of this family launches a malicious executable or may be dropped by other malware. These files are mostly used by worms to spread via USB drives (i.e.).[1][2]
Other aliases edit
- Win32/StartPage.NZQ (ESET) [2]
- Trojan.WinLNK.Startpage (Kaspersky Labs) [3]
- Trojan:Win32/Startpage.OS (Microsoft) [2]
Other Variants edit
- Trojan.WinLNK.Agent.ae
- Trojan.WinLNK.Agent.ew [4]