![]() |
|
|
| Subject:
computer virus
Category: Computers Asked by: tracer123-ga List Price: $10.00 |
Posted:
29 Mar 2004 10:48 PST
Expires: 28 Apr 2004 11:48 PDT Question ID: 321790 |
E6FB5E20-DE35-11CF-9C87-00AA005127ED what is this? It is found in Mydoom and Netsky viruses. |
|
| Subject:
Re: computer virus
Answered By: skermit-ga on 29 Mar 2004 10:57 PST |
E6FB5E20-DE35-11CF-9C87-00AA005127ED is a location string where these
two virii choose to hide in the system registry of Windows.
The full locations of the settings it hides in registry actually appear here:
HKEY_CURRENT_USER\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32
These are two of but many places in the system registry which are
created and used for the virus. It just makes it a bit harder for
antivirus programs to find and completely elminate if it disperses
itself throughout your registry, startup files, as well as infecting
various executables, not to mention its worm-like effects through
email, etc. For more information on how else the virus works, please
see the following page below:
http://www.f-secure.com/v-descs/mydoom_b.shtml
Thank you for your question,
skermit-ga |
|
| There are no comments at this time. |
If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you. |
| Search Google Answers for |
| Google Home - Answers FAQ - Terms of Service - Privacy Policy |