Troj/Delf-BPC is a Trojan for the Windows platform.
When first run Troj/Delf-BPC copies itself to <System>\oobe\csrss.exe and creates the following files:
<CurrentFolder>\init.bat - this file may be deleted
<System>\shlapiw32.dll - also detected as Troj/Delf-BPC
The following registry entries are created to run code exported by the Trojan libraries on startup:
HKLM\SOFTWARE\Microsoft\Windows
\CurrentVersion\ShellServiceObjectDelayLoad
Windows Update
(459FA2B2-E4C2-13D4-CA84-03501F45B839)
HKLM\SOFTWARE\Microsoft\Windows\
CurrentVersion\ShellServiceObjectDelayLoad
Battery Monitor
(459352B2-D4CE-13D4-2D78-03501003EF20)
The files csrss.exe and shlapiw32.dll are registered as COM objects, creating registry entries under:
HKCR\CLSID\(459352B2-D4CE-13D4-2D78-03501003EF20)
HKCR\CLSID\(459FA2B2-E4C2-13D4-CA84-03501F45B839)