Troj/Agent-ZD is a Trojan for the Windows platform.
When Troj/Agent-ZD is installed the following files are created:
<System>\doser.exe
<System>\ssldr32.dll
The file doser.exe is detected as Troj/Agent-PE.
The following registry entries are created to run code exported by ssldr32.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ssldr
Impersonate
0
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ssldr
DLLName
ssldr32.dll
The Trojan allows remote attackers the ability to route internet traffic through the infected computer.