W32/Vb.PGP Trojan

 Virus Information - W32/Vb.PGP Trojan:

W32/Vb.PGP is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan drops the following files in Windows System folder:

dpcxool64.sys
sopidkc.exe
tpsaxyd.exe
dncyool64.sys
msncache.dll
wtukd32.exe
tpszxyd.sys

It also drops the following files in WINDOWS\Temp folder:

mta77438.dll
mpj23395.dll

The trojan modifies registry at the following locations:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\msncache\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msncache\Parameters