When run Troj/Agent-JPM copies itself to
HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun
Window UDP Control Servic
winlogon.exe
More information can be found at this Sophos page.
4/21: Troj/Agent-JPM sets Registry Entries
Troj/Agent-JPM copies itself to \winlogon.exe and sets a number of registry entries.
Share
Troj/Agent-JPM is a Trojan for the Windows platform.
Loading Comments...