W32/Bagle.CX Trojan

 Information about the W32/Bagle.CX Trojan:

W32/Bagle.CX is a trojan. The trojan will infect Windows systems and spreads through email.

This trojan arrives as an email attachment, which is spammed by W32/Bagle.CX Worm. The name of the infected attachment may be any one of the following;

Alice.zip
Susan.zip
Anna.zip
Daniel.zip
Dorothy.zip
Peter.zip
James.zip
Winifred.zip
Nathaniel.zip

The attached zip file contains any one of the following files.

dsc00017.exe
s3700020.exe

Upon execution, the trojan copies itself as anti_troj.exe in the Windows System folder.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

This trojan connects to some of the websites in its pre-configured list and downloads a file.

This Trojan first appeared on December 15, 2005.

 Other names of W32/Bagle.CX Trojan:

This Trojan is also known as TROJ_BAGLE.CD .