Troj/Agent-FZF

Category: Viruses and Spyware Protection available since:27 Jul 2007 15:41:37 (GMT)
Type: Trojan Last Updated:27 Jul 2007 15:41:37 (GMT)
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-FZF is a backdoor Trojan which allows a remote intruder to gain access and control over the computer.

When Troj/Agent-FZF is installed it creates the file <System>\vyoaudx.dll.

The file vyoaudx.dll is detected as Troj/SpamTh-Gen.

The following registry entries are created to run code exported by DCOM Server 25319 and {2C1CD3D7-86AC-4068-93BC-A02304B25319} on startup:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{2C1CD3D7-86AC-4068-93BC-A02304B25319}
DCOM Server 25319

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
DCOM Server 25319
{2C1CD3D7-86AC-4068-93BC-A02304B25319}

The file vyoaudx.dll is registered as a COM object, creating registry entries under:

HKCR\CLSID\{2C1CD3D7-86AC-4068-93BC-A02304B25319

download Try Sophos products for free
Download now