W32/Magania.BZJQ.Spy Trojan

 Virus Information - W32/Magania.BZJQ.Spy Trojan:

W32/Magania.BZJQ.Spy is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops following files in Windows\System32 folder:

ahnsbsb.exe
ahnfgss0.dll
ahnxsds0.dll
ahnfgss1.dll

It also drops the following files :

k.exe in root of Windows installed drive.
ah.exe in Documents and Settings\Default User\Local Settings\Temp folder.

The trojan modifies registry at the following location:

HKEY_USERS\S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-XXXXXXXXX-XXXX\Software\Microsoft\Windows\CurrentVersion\Run