Troj/Agent-XC is a Trojan for the Windows platform.
When first run Troj/Agent-XC copies itself to <System>\csmsv.exe and creates the following files:
<Temp>\248.bat
<Temp>\315.bat
Both of these files are harmless on their own and can be safely deleted.
Troj/Agent-XC will attempt to give itself unrestricted access through the firewall running on the infected computer. The Trojan wil then use this access to look for other open ports on the local network, which may be reported to a remote user.
Troj/Agent-XC has the ability to download and execute files from remote URLs.
The following registry entries are created to run csmsv.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
ControlServiceMgr
csmsv.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ControlServiceMgr
csmsv.exe