1/7: Agent.XRB Trojan Drops .Exe File

W32/Agent.XRB is a Trojan that upon execution drops MSISERVER.exe in Windows System folder.

The Trojan modifies registry at the following locations:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

More information can be found at this Proland Software page.