Troj/Agent-IWI is a Trojan for the Windows platform.
When Troj/Agent-IWI is installed the following files are created:
<System>\avd_w2kw.exe - detected as Troj/Agent-IWI
<System>\conbinds.bin - can be safely deleted
<System>\svchostd.exe - detected as Troj/Agent-IWI
<System>\vdDelService.exe - detected as Troj/Agent-IWI
<System>\vdsScheduler.exe - detected as Troj/Agent-IWI
<System>\vds_unicode.dll - detected as Troj/Agent-IWI
<System>\vdsconfig.ini - detected as Troj/Agent-IWI
<System>\xzboot.exe - detected as Troj/Agent-IWI
The following registry entry is created to run xzboot.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
0_AVD32
<System>\xzboot.exe
The following registry entry is set:
HKLM\SOFTWARE\AVD_anvir_sys
rut
<System>\vdsconfig.ini