Troj/Clagger-S is a Trojan that downloads further malicious code.
Troj/Clagger-S is a Trojan that downloads further malicious code.
The Trojan downloads a file to <Windows>\suhoy330.exe and runs it.
The following registry entry is created in an attempt to bypass the Windows firewall:
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\
FiREWaLLpolicy\StAnDaRDPrOFiLe\AUtHorizedapplications\List
<pathname of Trojan executable>
<pathname of Trojan executable>:*:ENABLED:0