Troj/Brogger-D is a Trojan for the Windows platform.
Troj/Brogger-D targets the customers of certain online banking websites. The Trojan monitors browser usage and logs any account details entered, and may display fake user interfaces and record any entered details.
When Troj/Brogger-D is installed the following files are created:
<System>\dllcboxz.dll
<System>\msndrvsys.dll
<System>\msndrvsys.exe
<System>\xrosario.sdf
dllcboxz.dll is a clean DLL, and can safely be removed. xrosario.sdf is a clean data file, and can also safely be deleted.
msndrvsys.exe and msndrvsys.dll are detected as Troj/Brogger-D.
The following registry entry is created to run msndrvsys.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
msndrvsys
<System>\msndrvsys.exe