Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 9 May 2008 19:36:26 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/SpyAgent-I is a Trojan for the Windows platform.
Troj/SpyAgent-I includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/SpyAgent-I is installed the following files are created:
<System>\ntos.exe
<System>\wsnpoem\audio.dll
<System>\wsnpoem\video.dll
The following registry entry is changed to run ntos.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit
<System>\userinit.exe,<System>\ntos.exe,
