Threat Search: 

ThreatExpert's Statistics for Win32/Agent.worm.991248 [AhnLab]:

Win32/Agent.worm.991248 [AhnLab] is also known as:
Threat AliasNumber of Incidents
IM-Worm.Win32.Agent [Ikarus]15
Trojan:Win32/Nuwvult.A [Microsoft]15
Mal/Generic-A [Sophos]4
Trojan Horse [Symantec]2
Adware.Gen [Symantec]1
Generic.dx!cfe [McAfee]1
Generic.dx!dx [McAfee]1
Generic.dx!efq [McAfee]1
Generic.dx!ie [McAfee]1
Generic.dx!js [McAfee]1
IM-Worm.Win32.Agent.nd [Kaspersky Lab]1
IM-Worm.Win32.Agent.nv [Kaspersky Lab]1
IM-Worm.Win32.Agent.nw [Kaspersky Lab]1
IM-Worm.Win32.Agent.ql [Kaspersky Lab]1
Troj/Virtum-Gen [Sophos]1

Win32/Agent.worm.991248 [AhnLab] is known to be created as:
%System%\advhost.exe
Note: %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).