Troj/Agent-GUB is a Trojan for the Windows platform.
When first run Troj/Agent-GUB copies itself to <Windows>\winlogon.exe.
The following registry entry is created to run Troj/Agent-GUB on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
winlogon
<Windows>\winlogon.exe
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\Nvchost