high
Summary
Summary
Action- More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 15 October 2005 15:42:29 (GMT) |
| Detected by | All Sophos products |
Free virus scan
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action
- Summary
- Action
- More Information
Please follow the instructions for removing Trojans.
More Information
Troj/Agent-XC is a Trojan for the Windows platform.
When first run Troj/Agent-XC copies itself to <System>\csmsv.exe and creates the following files:
<Temp>\248.bat
<Temp>\315.bat
Both of these files are harmless on their own and can be safely deleted.
Troj/Agent-XC will attempt to give itself unrestricted access through the firewall running on the infected computer. The Trojan wil then use this access to look for other open ports on the local network, which may be reported to a remote user.
Troj/Agent-XC has the ability to download and execute files from remote URLs.
The following registry entries are created to run csmsv.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
ControlServiceMgr
csmsv.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
ControlServiceMgr
csmsv.exe
|
