Trojan.PWS.Agent.SGD

The malware drops the following files:

1) %windir%\system32\hbqqxx.dll
- this .dll will be injected in all the running processes and it will try to steal sensitive information, such as user accounts and passwords for the Tencent QQ instant messaging program

2) %windir%\system32\system.exe

3) %windir%\system32\drivers\hbkernel32.sys
- a service named HBKernel32 will be created and will be started at every system startup
- will set the registry key:
HKLM\System\CurrentControlSet\Services\HBKernel32
ImagePath - Please let BitDefender delete your infected files.

If you have at least one of the following files on your computer, you are infected:

%windir%\system32\system.exe (size: 7,5KB)
%windir%\system32\drivers\hbkernel32.sys (size: 17,6KB)

(where %windir% stands for c:\windows of c:\winnt, depending on the operating system)