W32/Bagle.DL Trojan

 Virus Information - W32/Bagle.DL Trojan:

W32/Bagle.DL is a trojan. The trojan will infect Windows systems and spreads through email.

This trojan arrives as an email attachment. The name of the infected attachment will be anyone of the following;

max.zip
text_sms.zip
Business.zip
Info_Prices.zip
The_new_prices.zip
Business_dealing.zip
Health_and_knowledge.zip

This file contains t_535475.exe which is a copy of trojan.

Upon execution, the trojan copies itself as hloader_exe.exe in the Windows System folder.

It also drops a file hleader_dll.dll in the Windows System folder.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

This trojan connects to some of the websites in its pre-configured list to check for updates.