Troj/Dload-BG is a Trojan for the Windows platform.
Troj/Dload-BG includes functionality to access the internet and communicate with a remote server via HTTP.
Troj/Dload-BG will attempt to download and execute additional files.
Registry entries are created under:
HKLM\SOFTWARE\Microsoft\VideoPlugin
The Trojan also changes the following registry entries:
HKLM\SYSTEM\ControlSet001\Services\BITS
Start
2
(default in Windows XP Pro SP2 is 3)
HKLM\SYSTEM\CurrentControlSet\Services\BITS
Start
2
(default in Windows XP Pro SP2 is 3)