Troj/Bdoor-MC is a backdoor Trojan for the Windows platform.
When first run Troj/Bdoor-MC copies itself to <System>\<random>\<random>.exe.
The following registry entry is created to run the copy on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wuauon
<System>\<random>\<random filename>.exe
The file is registered as a COM object, creating registry entries under:
HKCR\CLSID\(141558D2-4E64-D9D0-5657-0F5E9E421843)
The following registry entry is set, affecting internet security:
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyServer