high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | February 2008 (4.26) |
| Protection available since | 20 December 2007 12:23:01 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Agent-GJQ is a Trojan for the Windows platform.
When run Troj/Agent-GJQ copies itself as f3c74e3fa248.exe into the <Windows>\help folder. It also drops a dll file of the same name into the folder. The hidden and system attributes are set for both files:
<Windows>\help\f3c74e3fa248.exe
<Windows>\help\f3c74e3fa248.dll (proactively detected as Mal/LineDLL-B)
The following Registry entry is set to load the malicious code in the dropped DLL:
HKCR\CLSID\{1DBD6574-D6D0-4782-94C3-69619E719765}
InProcServer32
<Windows>\help\f3c74e3fa248.dll
|
