Troj/Dloader-HW is a downloader Trojan for the Windows platform.
Troj/Dloader-HW downloads a configuration file from a website in the searchmiracle.com domain. The configuration file contains URLs and filenames from which the Trojan downloads further files.
Troj/Dloader-HW copies itself the the Windows system folder as a file named elite???32.exe where ??? are random characters. The Trojan ensures that the copy is run each time a user logs on by adding the following registry entry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
antiware
elite???32.exe
Troj/Dloader-HW also adds several registry entries under:
HKCU\Software\LQ