high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 20 December 2007 12:23:01 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Agent-GJQ is a Trojan for the Windows platform.
When run Troj/Agent-GJQ copies itself as f3c74e3fa248.exe into the <Windows>\help folder. It also drops a dll file of the same name into the folder. The hidden and system attributes are set for both files:
<Windows>\help\f3c74e3fa248.exe
<Windows>\help\f3c74e3fa248.dll (proactively detected as Mal/LineDLL-B)
The following Registry entry is set to load the malicious code in the dropped DLL:
HKCR\CLSID\{1DBD6574-D6D0-4782-94C3-69619E719765}
InProcServer32
<Windows>\help\f3c74e3fa248.dll
|
