Summary

Summary
Action
More Information
| Affected operating systems | Windows |
|---|---|
| Characteristics |
|
| Protection available since | 29 May 2006 11:28:26 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing Trojans.
More Information
Troj/BagleDl-BR is a Trojan for the Windows platform.
The Trojan has the functionality to silently download, install and run new software from preconfigured sources via HTTP.
When the Trojan is installed the following folder and files are created:
<Temp>\~11.exe
<Temp>\~12.exe
<System>\hldrrr.exe
The following registry entries are created to run hldrrr.exe on startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
hldrrr
<System>\hldrrr.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
hldrrr
<System>\hldrrr.exe
Registry entries are created under:
HKCU\Software\FirstRRRun\
