Troj/Agent-MRF is a Trojan for the Windows platform.
Troj/Agent-MRF includes functionality to run automatically and access the internet and communicate with a remote server via HTTP.
Troj/Agent-MRF communicates via HTTP with the following locations:
195 . 190 . 13 . 198
When Troj/Agent-MRF is installed it creates the file <System>\dllcache\explorer.exe.
Registry entries are set as follows:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
Run
userini
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Run
userini