Troj/Agent-ODZ is a Trojan for the Windows platform.
Troj/Agent-ODZ includes functionality to:
- run automatically
- steal confidential information
- access the internet and communicate with a remote server via HTTP
When first run Troj/Agent-ODZ moves itself to <User>\Application Data\Vista\W7.exe.
The following registry entry is created to run W7.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
W7.exe Nacional
<User>\Application Data\Vista\W7.exe
Registry entries are created under:
HKCU\Software\Vistaa