high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Included in our products from | March 2008 (4.27) |
| Protection available since | 5 February 2008 10:22:19 (GMT) |
| Detected by | All Sophos products |
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Agent-GOR is a Trojan for the Windows platform.
When first run Troj/Agent-GOR copies itself to <System>\msdo.exe and creates the file <Current Folder>\j - detected as Troj/Agent-GOR
The following registry entry is created to run msdo.exe on startup:
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\1
(C0FB7D08-D593-85A4-45E2-7A20A3430056)
StubPath
<System>\msdo.exe
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\MSAX
When run Troj/Agent-GOR may display a fake error message box with the title "Error" and the text "Could not initialize installation".
|
