|
|
Subject:
computer virus
Category: Computers Asked by: tracer123-ga List Price: $10.00 |
Posted:
29 Mar 2004 10:48 PST
Expires: 28 Apr 2004 11:48 PDT Question ID: 321790 |
E6FB5E20-DE35-11CF-9C87-00AA005127ED what is this? It is found in Mydoom and Netsky viruses. |
|
Subject:
Re: computer virus
Answered By: skermit-ga on 29 Mar 2004 10:57 PST |
E6FB5E20-DE35-11CF-9C87-00AA005127ED is a location string where these two virii choose to hide in the system registry of Windows. The full locations of the settings it hides in registry actually appear here: HKEY_CURRENT_USER\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32 HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InprocServer32 These are two of but many places in the system registry which are created and used for the virus. It just makes it a bit harder for antivirus programs to find and completely elminate if it disperses itself throughout your registry, startup files, as well as infecting various executables, not to mention its worm-like effects through email, etc. For more information on how else the virus works, please see the following page below: http://www.f-secure.com/v-descs/mydoom_b.shtml Thank you for your question, skermit-ga |
|
There are no comments at this time. |
If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you. |
Search Google Answers for |
Google Home - Answers FAQ - Terms of Service - Privacy Policy |