Troj/GrayBrd-A

Category: Viruses and Spyware
Type: Trojan
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/GrayBrd-A is a Trojan for the Windows platform.

When first run Troj/GrayBrd-A copies itself to <System>\FRundlll.exe and creates the file <System>\Deleteme.bat.

The file FRundlll.exe is registered as a new system driver service named "FRundlll", with a display name of "Windows Rwxf" and a startup type of automatic, so that it is started automatically during system startup.

Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\FRundlll\

download Try Sophos products for free
Download now