W32/Corpes.D Trojan

 Virus Information - W32/Corpes.D Trojan:

W32/Corpes.D is a proxy trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops the following files:

ibudu.dll in the Windows System folder,
itcoe.sys in the Windows System folder.

The trojan modifies the following registry at the following locations:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ibudu
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\itcoe

The trojan registers itself as a service named "itcoe adapter".