Troj/Zbot-BUS

Category: Viruses and Spyware Protection available since:04 May 2012 11:22:00 (GMT)
Type: Trojan Last Updated:04 May 2012 11:22:00 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/Zbot-BUS exhibits the following characteristics:

File Information

Size
71K
SHA-1
2d73005ce0e87e1bdcd5b0e9449380c69482b190
MD5
cc6373c98078e933ffba9bdee6d41737
CRC-32
3e918eb3
File type
application/x-ms-dos-executable
First seen
2012-05-04

Runtime Analysis

Copies Itself To
  • C:\Documents and Settings\All Users\svchost.exe
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    SunJavaUpdateSched
    C:\Documents and Settings\All Users\svchost.exe

download Try Sophos products for free
Download now