Search
Keyword: vb
{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}
{645FF040-5081-101B-9F08-00AA002F954E} (Note: %System% is the Windows system folder, which is usually C:\Windows\System32.) Other System Modifications This worm adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA
\Software\VB and VBA Program Settings\ x\z HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1} HKEY_CURRENT_USER\clsid\
NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER
{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}
Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1} HKEY_CURRENT_USER\clsid\
\CurrentVersion\Run jzmeuy = "%User Profile%\jzmeuy.exe /u" Other System Modifications This worm adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z HKEY_CURRENT_USER
Server 2003, or C:\Users\{user name} on Windows Vista and 7.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER\Software\Classes\ clsid
kdbx als aup cpr npr cpp bas asm cs php pas class py pl h vb vcproj vbproj java bak backup mdb accdb mdf odb wdb csv tsv sql psd eps cdr cpt indd dwg ai svg max skp scad cad 3ds blend lwo lws mb slddrw
downloaded VB script %Application Data%\Dropebox{username}{number}\ps1__.ps1 - downloaded powershell (Note: %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\
NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.) It adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER
adds the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ trial version\trial HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Image File Execution Options
the following registry keys: HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1} HKEY_CURRENT_USER\clsid\
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ x\z It adds the following registry entries: HKEY_CURRENT_USER\Software\Microsoft\ Windows\CurrentVersion\Explorer\ Advanced ShowSuperHidden = "0
HKEY_CURRENT_USER\Software\VB and VBA Program Settings\ mm\5 HKEY_CURRENT_USER\Software\Classes\ clsid HKEY_CURRENT_USER\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1} HKEY_CURRENT_USER\clsid\