Troj/Agent-EBT is a Trojan for the Windows platform.
Troj/Agent-EBT includes functionality to access the internet and communicate with a remote server via HTTP.
When Troj/Agent-EBT is installed the following files are created:
<Temp>\free porn finder.exe
<Temp>\gfdhsagfhsgajkfgsadhgfksag1_2.bat
<Temp>\gfdhsagfhsgajkfgsadhgfksag2_2.bat
<Temp>\gfdhsagfhsgajkfgsadhgfksag2_2.exe
Troj/Agent-EBT also attempts to start these executables created in the <Temp> folder.
When the file gfdhsagfhsgajkfgsadhgfksag2_2.exe is started it copies itself to <System>\svehost.exe.
The following registry entry is created to run svehost.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Intel system tool
<System>\svehost.exe