W32/Magania.ALBS Trojan

 Virus Information - W32/Magania.ALBS Trojan:

W32/Magania.ALBS is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops following files in Windows\System32 folder:

kamsoft.exe
gasretyw0.dll
olhrwef.exe
nmdfgds0.dll

It also drops following files in root of Windows installed drive:

yudald.bat
abk.bat

The trojan modifies registry at the following location:

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run