Troj/Agent-JKA

Category: Viruses and SpywareProtection available since:28 Mar 2009 06:47:12 (GMT)
Type: TrojanLast Updated:28 Mar 2009 06:47:12 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Agent-JKA is a Trojan for the Windows platform.

When run Troj/Agent-JKA copies itself to <Windows>\adobereader.exe and sets the following registry entries:

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run
adobereader
adobereader.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
adobereader
adobereader.exe

HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
<path to Trojan executable>
<path to Trojan executable>:*:Enabled:adobereader