CME-540, Win32.Tpbot.A [Computer Associates]Bozori.A [F-Secure]Net-Worm.Win32.Bozori.a [Kaspersky Lab]W32/Bozori.worm.a!CME-540 [McAfee]W32/Tpbot-A [Sophos]WORM_RBOT.CBQ [Trend Micro]
wintbp.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunDelete this value : ""Wintbp.exe" = "percentSystempercentwintbp.exe"