W32/Agent-FOW is a worm for the Windows platform.
The worm spreads by copying itself to removable shared drives.
When first run W32/Agent-FOW copies itself to the following location on the local drive and all removable shared drives:
<Windows>\krag.exe
and creates the files <Windows>\autorun.inf and <Current Folder>\kragdor.log. The file autorun.inf is also detected as W32/Agent-FOW. The file kragdor.log is a harmless text file and may be deleted.
The following registry entry is created to run krag.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
krag
<Windows>\krag.exe