Troj/BagleDl-AL is a Trojan for the Windows platform.
Troj/BagleDl-AL attempts to remove services, processes, files and registry
entries associated with anti-virus and security software.
When run the Trojan copies itself to the Windows system folder as winlog.exe
and creates a file named winlog.dll in the same folder. Winlog.dll is also
detected as Troj/BagleDl-AL.
The Trojan creates the following registry entries to ensure that it is run each
time a user logs on:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
key2
<System>\winlog.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
key2
<System>\winlog.exe