This is a password stealing Trojan that collects system passwords from the PC and emails it to the author.

It adds itself from the current working directory to
\Windows\system\iexpand.exe and adds an entry to the registry key as "iexpand" and the value is iexpand.exe. The key name is:
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run.

Then it sends email using SMTP to onegin@mailru.com. It gets all Windows password information. It also includes the machine information. Then it deletes the Windows system file REGEDIT.EXE and MSCONFIG.EXE

To Remove:

1.Remove the registry entry:
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Run, and restart your PC.

2.Delete all files detected as TROJ_PLATAN and the file
\Windows\system\IEXPAND.EXE.

3.Restore the file REGEDIT.EXE and MSCONFIG.EXE from a backup copy or from a machine with the same OS. These should be located at \Windows\system folder.