VBA/TrojanDownloader.Agent.AAZ [Threat Name] go to Threat

VBA/TrojanDownloader.Agent.AAZ [Threat Variant Name]

Category trojan
Aliases X97M.DownLoader.56 (Dr.Web)
  Trojan.Doc.Agent.N (BitDefender)
  Trojan-Downloader.VBS.Agent.aqt (Kaspersky)
  TrojanDownloader:O97M/Donoff (Microsoft)
Short description

VBA/TrojanDownloader.Agent.AAZ is a trojan which tries to download other malware from the Internet.


The trojan does not create any copies of itself.

Other information

The trojan contains a URL address.

It tries to download a file from the address.

The file is stored in the following location:

  • %temp%\­ruebfo.exe

The file is then executed. The HTTP protocol is used.

Trojan requires the Microsoft Excel to run.

Please enable Javascript to ensure correct displaying of this content and refresh this page.