W32/Magania.BWVX.Spy Trojan

 Virus Information - W32/Magania.BWVX.Spy Trojan:

W32/Magania.BWVX.Spy is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops the following files in Documents and Settings\Default user\Local Settings\Temp folder:

herss.exe
cvasds0.dll
cvasds1.dll

It also drops the following files in root of Windows installed drive:

hx.exe
1hqup.exe

The trojan modifies registry at the following location:

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run