Sophos

Troj/Agent-EL

Aliases
  • TROJ_AGENT.GC
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from November 2005 (3.99)
Protection available since 8 September 2005 10:21:28 (GMT)
Last updated 8 September 2005 18:06:36 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Agent-EL is an adware related DLL which provides functionality to download and run executable files via HTTP (port 80).

The Troj/Agent-EL DLL is registered as a COM object, creating registry entries under:

HKCR\CLSID\(288C5F13-7E52-4ADA-A32E-F5BF9D125F99)
HKCR\Interface\(450B9E4D-4014-4DE3-B34E-014A81468293)
HKCR\TypeLib\(C7F00A9A-F1BC-436E-82C7-E8CAE6FD67F7)
HKCR\retro64_loader.R64Loader\
HKCR\retro64_loader.R64Loader.1\

To de-register the Troj/Agent-EL DLL run:

regsvr32 /U <pathname of Troj/Agent-EL DLL>

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer