Wintbp.exe Wintbp
Wintbp.exe is a process associated with the Zotob.exe Virus Worm. This program is a registered security risk and should be removed immediately. If found on your system make sure that you have downloaded the latest update for your antivirus application
Worm@W32.Zotob.2 , WORM_RBOT.CBQ
• The Zotob.exe worm will create the mutex "wintbp.exe", so that only one copy of the worm runs at one time.
• The worm will attempt to connect to the IRC server:
72.20.27.115
• The worm will attempt to open a back door by connecting to the following IP address: 72.20.41.139
• Attempts to end the following processes:
wintbp.exe
svnlitup32.exe
service32.exe
mousebm.exe
llsrv.exe
• After executing virus, virus will copy itself to "System" folder:
wintbp.exe
wintbpx.exe
• After executing virus, it will create following files to "Temp"\ fodlder
[0~9].bat
• Add following value to the registry, then virus will run while you start Windows.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
"
Wintbp" = "wintbp.exe"
"
Wintbpx" = "wintbpx.exe"
...Where nothing can possibli go wrong!
Remember the 1973 film classic, Westworld? A story about a computer virus 20 years before anyone had heard of 'em. Please watch a little clip from the movie by clicking here.
Latest Computer Viruses
Books, Software