Troj/Agent-HBR is a Trojan for the Windows platform.
When first run,Troj/Agent-HBR copies itself to
<Program Files>\Antivirus2008\Antvrs.exe
Troj/Agent-HBR has the functionalities to:
-download files from preconfigured URLs.
-open links to websites
-log key
-steal information from clipboard
-upload to preconfigured URLs
-be a proxy.
The following registry entry is changed to run Antvrs.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Antivirus
<Program Files>\Antivirus2008\Antvrs.exe
Troj/Agent-HBR also create registry entries under
HKCU\Software\Antivirus\
HKLM\Software\Antivirus\