Troj/Agent-HRI

Category: Viruses and Spyware Protection available since:18 Sep 2008 21:47:02 (GMT)
Type: Trojan Last Updated:18 Sep 2008 21:47:02 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-HRI is a Trojan for the Windows platform.

When first run, Troj/Agent-HRI copies itself to <System>\mscdexntx.exe and sets the following registry to run itself on startup:

HKLM\SOFTWARE\Microsoft\Windows_NT\CurrentVersion\Winlogon
Userinit
<System>\userinit.exe, <System>\mscdexntx.exe

Troj/Agent-HRI sets the following registry entry:

HKCU\Software\Microsoft
version
<random 8-letter string>

Troj/Agent-HRI attempts to download and execute a file from a remote website. At the time of writing this file is detected as Mal/EncPk-DG.

download Try Sophos products for free
Download now