high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | September 2007 (4.21) |
| Protection available since | 28 July 2007 05:48:41 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Agent-FZF is a backdoor Trojan which allows a remote intruder to gain access and control over the computer.
When Troj/Agent-FZF is installed it creates the file <System>\vyoaudx.dll.
The file vyoaudx.dll is detected as Troj/SpamTh-Gen.
The following registry entries are created to run code exported by DCOM Server 25319 and {2C1CD3D7-86AC-4068-93BC-A02304B25319} on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
{2C1CD3D7-86AC-4068-93BC-A02304B25319}
DCOM Server 25319
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
DCOM Server 25319
{2C1CD3D7-86AC-4068-93BC-A02304B25319}
The file vyoaudx.dll is registered as a COM object, creating registry entries under:
HKCR\CLSID\{2C1CD3D7-86AC-4068-93BC-A02304B25319
|
