W32/Bagle.GR is a trojan. The trojan will infect Windows systems.

Upon execution, the trojan copies itself as anti_troj.exe in the Windows System folder.

It opens ntimage.gif file using the default image viewer.

The trojan modifies registry at the following location to load itself during each startup.

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

This trojan connects to some of the websites in its pre-configured list and downloads a file.

This trojan first appeared on December 22, 2005.

 Other names of W32/Bagle.GR Trojan:

This Trojan is also known as TROJ_BAGLE.GR .