Troj/Zbot-BUS exhibits the following characteristics:
File Information
- Size
- 71K
- SHA-1
- 2d73005ce0e87e1bdcd5b0e9449380c69482b190
- MD5
- cc6373c98078e933ffba9bdee6d41737
- CRC-32
- 3e918eb3
- File type
- application/x-ms-dos-executable
- First seen
- 2012-05-04
Runtime Analysis
Copies Itself To
- C:\Documents and Settings\All Users\svchost.exe
Registry Keys Created
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- SunJavaUpdateSched
- C:\Documents and Settings\All Users\svchost.exe