Sophos

Sophos blogs

Troj/Agent-GHR

Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Protection available since 3 December 2007 19:50:55 (GMT)
Last updated 4 December 2007 23:24:06 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

Troj/Agent-GHR is a Trojan for the Windows platform.

When Troj/Agent-GHR is installed it creates the file <Root>\xp2007.dat.

The file xp2007.dat is registered as a COM object and Browser Helper Object (BHO) for Microsoft Internet Explorer, creating registry entries under:

HKCR\CLSID\{13C5F3C6-22C0-45B5-8CA2-FF04A152706E}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\
{13C5F3C6-22C0-45B5-8CA2-FF04A152706E}

Registry entries are created under:

HKLM\SOFTWARE\{13C5F3C6-22C0-45B5-8CA2-FF04A152706E}

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer