Troj/Agent-FZ is a Trojan for the Windows platform.
Troj/Agent-FZ includes functionality to access the internet and communicate with a remote server via HTTP.
When first run Troj/Agent-FZ copies itself to <Windows>\dcf5678.exe.
The following registry entry is created to run dcf5678.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
AdPopup
<Windows>\dcf5678.exe
The following registry entries are set, affecting internet security:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\boxsearch.net
*
2
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\brdatahost.com
*
2