Troj/Agent-MFL

Category: Viruses and Spyware Protection available since:20 Jan 2010 05:37:18 (GMT)
Type: Trojan Last Updated:20 Jan 2010 05:37:18 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-MFL is a Trojan for the Windows platform.

Troj/Agent-MFL includes functionality to run automatically.

When Troj/Agent-MFL is installed it copies itself to <System>\csbdll.dll.

Registry entries are set as follows:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
csbdll
DLLName

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
csbdll
StartShell

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
csbdll
Logon

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
csbdll
Logoff

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
csbdll
Impersonate

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
csbdll
Asynchronous

download Try Sophos products for free
Download now