Troj/Agent-GVM is a Trojan for the Windows platform.

When first run, Troj/Agent-GVM copies itself to (System)\mswinsock.exe.

The following registry entry is created to run mswinsock.exe on startup:


HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{00A59398-C81D-E69F-D6A4-6924A05803FD}
StubPath
(System)\mswinsock.exe

More information can be found at this Sophos page.