Troj/Bckdr-GPJ is a backdoor Trojan for the Windows platform.
When run Troj/Bckdr-GPJ creates the following files:
<System>\Zcjflmoj.dll
<System>\Zcjflmoj.drv
<System>\Zcjflmoj.sys
These files are also detected as Troj/Bckdr-GPJ. The file <System>\Zcjflmoj.sys is a kernel driver rootkit that will attempt to hide registry entries, filenames, folder names, processes and services with the name "Zcjflmoj".
When run Troj/Bckdr-GPJ may create the following registry entries to run itself on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Zcjflmoj
<path to Trojan executable>
The file Zcjflmoj.sys is registered as a new system driver service named "Zcjflmoj" with a display name of "Zcjflmoj" and a startup type of automatic, so that it is started automatically during system startup. Registry entries are created under:
HKLM\SYSTEM\CurrentControlSet\Services\Zcjflmoj