Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 26 December 2005 14:39:37 (GMT) |
| Last updated | 4 January 2006 13:51:39 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Agent-IG is a Trojan for the Windows platform.
Troj/Agent-IG is capable of spying on a user's browsing habits, modifying Microsoft Internet Explorer settings, downloading further executables and displaying popup advertisements.
When Troj/Agent-IG is installed the following files are created:
<System>\gtrack.dll
<System<\kaboom.dll
The files gtrack.dll and kaboom.dll are registered as COM objects and Browser Helper Objects (BHOs) for Microsoft Internet Explorer, creating registry entries under:
HKCR\CLSID\(4BC9A7AC-2329-49D0-B07F-5FE484029DC2)
HKCR\CLSID\(CC56A1F3-9B83-45FF-8CB6-D58959492F0F)
HKCR\Interface\(88B67E52-A8D4-44AF-A199-DEE96469B7AF)
HKCR\Interface\(D861BD5E-E1E7-4E5E-AB15-CB347FBDBC6D)
HKCR\Kaboom.IEagent\
HKCR\Kaboom.IEagent.1\
HKCR\TypeLib\(023E6659-1A0A-4724-9273-66EA06A82C98)
HKCR\TypeLib\(B73EF4A8-B8B1-4683-8D21-AA1C1A46CAD7)
HKCR\Watcher.GoogleTracker\
HKCR\Watcher.GoogleTracker.1\
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(4BC9A7AC-2329-49D0-B07F-5FE484029DC2)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\(CC56A1F3-9B83-45FF-8CB6-D58959492F0F)
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\IEAgent\

