Threat Database Viruses Virus.Win32.VB.bu

Virus.Win32.VB.bu

By Domesticus in Viruses

Virus.Win32.VB.bu is a computer virus that may port files to an infected system without alerting the computer user. Virus.Win32.VB.bu propagates via installed malicious programs or removable media. Virus.Win32.VB.bu usually corrupts a targeted machine in the form of a program or programming code which carries a harmful payload. Virus.Win32.VB.bu opens up firewalls and gathers personal information. Virus.Win32.VB.bu controls its victim's PC activities to gain valuable confidential data. Remove Virus.Win32.VB.bu immediately after detection.

File System Details

Virus.Win32.VB.bu may create the following file(s):
# File Name Detections
1. %Documents and Settings%\[UserName]\Application Data\av.exe
2. %Documents and Settings%\[UserName]\Start Menu\ Protection Center.lnk

Registry Details

Virus.Win32.VB.bu may create the following registry entry or registry entries:
HKEY_CLASSES_ROOT\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000}
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings 'ProxyOverride' = ''
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon 'Shell' = '%UserProfile%\Application Data\antispy.exe'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System 'DisableTaskMgr' = '1'
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run 'tmp'
HKEY_CURRENT_USER\Software\Classes\secfile
HKEY_CURRENT_USER\Software\Malware Defense

Trending

Most Viewed

Loading...