Sophos

Troj/Agent-GPI

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from April 2008 (4.28)
Protection available since 12 February 2008 07:20:36 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Agent-GPI is a Trojan for the Windows platform.

When run Troj/Agent-GPI creates the files:
<System>\drivers\Iyl59.sys - detected as Troj/Agent-GPI
<System>\drivers\symavc32.sys - detected as Troj/Agent-GPI

Troj/Agent-GPI then proceeds to run the file symavc32.sys as a service name "symavc32" with a display name of "symavc32" and a startup type of automatic.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer