When run Troj/Agent-IOV copies itself to \digeste.dll and adds the DLL file to the following registry entry:
HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders
SecurityProviders
,digeste.dll
When run Troj/Agent-IOV copies itself to digeste.dll and adds the DLL file to the following registry entry:
HKLMSYSTEMCurrentControlSetControlSecurityProviders
SecurityProviders
,digeste.dll
More information can be found at this Sophos page.
Loading Comments...