Troj/Agent-BO

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-BO is a backdoor Trojan for the Windows platform that also may download files from a predefined location without the user's consent.

When first executed, Troj/Agent-BO copies itself to the Windows system folder with the filename winlog0n.exe and to the Windows system drivers folder with the filename audiox.

In order to be able to run automatically when Windows starts up the Trojan sets the registry entry:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Windows Update Manager
"WINLOG0N.EXE"

download Try Sophos products for free
Download now