Troj/Haxdoor-BE is a Trojan for the Windows platform.
When Troj/Haxdoor-BE is installed the following files are created:
<System>\openglss.dll
<System>\openglssd.sys
The file openglss.dll is detected as Troj/Haxdor-Fam and the file openglssd.sys is detected as Troj/Haxdor-Gen.
The following registry entries are created to run code exported by openglss.dll on startup:
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\openglss
DllName
openglss.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\openglss
Startup
openglss
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\openglss
Impersonate
1