W32/Agent.AJXM Trojan

 Virus Information - W32/Agent.AJXM Trojan:

W32/Agent.AJXM is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops the following files in Windows\System32 folder:

olhrwef.exe
nmdfgds0.dll
nmdfgds1.dll

It also drops the following files in the root of Windows installed drive:

gyn.cmd
xhah66s.cmd

The trojan modifies registry at the following location:

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run