W32/Bagle.CR is an Trojan. This Trojan will infect Windows systems.

Upon execution, the trojan copies itself as winshost.exe in the Windows system folder and cjector.exe in the Windows folder.

It alters the windows registry at the following location to load itself during next startup;

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

It also alters HOSTS file and prevents the user to access some of the security related websites.

The trojan downloads a file from its pre-configured list and saves the downloaded file as _re_file.exe.

This worm first appeared on September 9, 2005.

 Other names of W32/Bagle.CR Trojan:

This Worm is also known as TROJ_BAGLE.CR.