Troj/Dloader-OR is a downloader Trojan which will download, install and run new software without user's notification.
When first run Troj/Dloader-OR creates a folder called "IE" in the Windows folder and copies itself to <Windows folder>\IE\MD1.exe.
The following registry entry is created to run MD1.exe on startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
File0_0
<path of Trojan>
Registry entries are created under:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
File1
Dia Claro.htm