Threat Search: 

ThreatExpert's Statistics for Troj/Agent-IIR [Sophos]:

Troj/Agent-IIR [Sophos] is also known as:
Threat AliasNumber of Incidents
Trojan.Vundo [Ikarus]66
Trojan:Win32/Vundo.gen!AG [Microsoft]57
Trojan.Vundo [Symantec]30
Vundo [McAfee]25
Trojan.Awax [Symantec]11
Trojan.Win32.Agent.arsp [Kaspersky Lab]9
Trojan.Agent [PC Tools]6
Trojan.Win32.Monderb.aimg [Kaspersky Lab]4
Vundo.gen.m [McAfee]4
Trojan.Awax!sd6 [PC Tools]3
Trojan.Vundo!sd6 [PC Tools]3
Trojan.Win32.Monder.ywp [Kaspersky Lab]2
Trojan:Win32/Vundo.JC [Microsoft]2
Trojan-Downloader.Win32.Agent.avyv [Kaspersky Lab]2
Vundo.gen.i [McAfee]2
not-a-virus:AdWare.Win32.SuperJuan.fxm [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SuperJuan.gbx [Kaspersky Lab]1
not-a-virus:AdWare.Win32.SuperJuan.gcb [Kaspersky Lab]1
not-a-virus:FraudTool.Win32.AntiVermins.v [Kaspersky Lab]1
Packed.Win32.PolyCrypt.s [Kaspersky Lab]1
Trojan Horse [Symantec]1
Trojan.Metajuan [Symantec]1
Trojan.Win32.Agent.annc [Kaspersky Lab]1
Trojan.Win32.Agent.assn [Kaspersky Lab]1
Trojan.Win32.Monder.aaqk [Kaspersky Lab]1
Trojan.Win32.Monder.aass [Kaspersky Lab]1
Trojan.Win32.Monder.aavo [Kaspersky Lab]1
Trojan.Win32.Monder.ablt [Kaspersky Lab]1
Trojan.Win32.Monder.acwj [Kaspersky Lab]1
Trojan.Win32.Monder.yuc [Kaspersky Lab]1
Trojan.Win32.Monderb.acfq [Kaspersky Lab]1
Trojan.Win32.Monderb.agnh [Kaspersky Lab]1
Trojan:Win32/Vundo.JD [Microsoft]1

Troj/Agent-IIR [Sophos] is known to be created as:
%System%\fcccctmg.dll
%System%\gebrpqri.dll
%System%\iifgdvon.dll
%System%\khfgyxvm.dll
%System%\ljjaatqq.dll
%System%\ljjdtlef.dll
%System%\mljculkk.dll
%System%\mljdaxxy.dll
%System%\mljdvtrh.dll
%System%\nnnldunm.dll
%System%\nnnlijyp.dll
%System%\opnliaab.dll
%System%\pmnomdww.dll
%System%\ssqpolkl.dll
%System%\urqnevwo.dll
%System%\wvuklbxp.dll
%System%\wvuonhwt.dll
%System%\yayvsjjh.dll
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).