Win32.Bagle.R,S,T@mm

SYMPTOMS:

The following files in %sysdir %:
directs.exe
directs.exeopen
directs.exeopenopen
directs.exeopenopenopen

The following registry key:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\directs.exe with value:
%sysdir%\directs.exe

TECHNICAL DESCRIPTION:

These are variants of Win32.Bagle.Q@mm. For more information please see the Win32.Bagle.Q@mm description

Removal instructions:

ANALYZED BY: