Troj/Agent-LTF is a Trojan for the Windows platform.
Troj/Agent-LTF includes functionality to:
- run automatically
- create files in the <WINDOWS>\system32 folder
- access the internet and communicate with a remote server via HTTP
Troj/Agent-LTF communicates via HTTP with the following locations:
clr17kp630o . com
When Troj/Agent-LTF is installed the following files are created:
<User>\photo_id.exe
<System>\photo_id.exe
The following registry entry is created to run photo_id.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
photo_id
<System>\photo_id.exe