Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'sysfbtray' = '%WINDIR%\bill113.exe'
- %WINDIR%\bill113.exe
- %WINDIR%\bill113.exe
- %WINDIR%\bill113.exe
- '74.##5.232.51':80
- 74.##5.232.51/
- DNS ASK www.google.com
The page may not load correctly.
Added to the Dr.Web virus database: 2013-03-11
Virus description added: 2013-03-13