Trojan:Win32/Agent is a generic detection for a number of trojans that may perform different malicious functions. The behaviors exhibited by this family are highly variable.
Due to the generic nature of this detection, methods of installation may vary. These trojans may often install themselves by copying their executable to the Windows or Windows system folders, and then modifying the registry to run this file at each system start. These trojans often modify the following subkey in order to accomplish this:
Again, the generic nature of this detection means that the Payloads performed by this group of trojans may be highly variable, and therefore difficult to describe specifically. This group of trojans has been observed to perform any, or all, of the following actions:
- redirect Web traffic
- manipulate certain Windows or third-party applications including settings or configurations
- drop or install additional malicious programs
- download and run additional malicious programs
Please note that this list is not exhaustive.
The behaviors exhibited by this group of trojans is highly variable - thus there are no symptoms specific to this detection.