W32/Bagle.DV Trojan

 Virus Information - W32/Bagle.DV Trojan:

W32/Bagle.DV is a trojan. The trojan will infect Windows systems and spreads through email.

Upon execution, the trojan copies itself as ldr64.dll in the Windows System folder and _ex[random number].tmp.exe in Windows Temporary folder.

It opens message box with the following title;

Select file to crack

When a file is selected it displays the following error message;

Incorrect file version

The trojan modifies registry at the following location to load itself during each startup.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Winlogon

This trojan connects to some of the websites in its pre-configured list and downloads a file.