W32/Bagle.BU Trojan

 Virus Information - W32/Bagle.BU Trojan:

W32/Bagle.BU is a trojan. The trojan will infect Windows systems and spreads through email.

Upon execution, the trojan copies itself as im_1.exe and im_2.exe in Windows System folder.

It also drops the following files in Windows Temp folder.

~(random characters).exe
~(random characters).jpg

It opens ~(random characters).jpg file using the default image viewer of the infected system.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

It tries to termiate some of the security related processes.