The virus will copy its executable file under one of the following names (depending on the version of the virus):
%Windir%\setupset.bat %Windir%\helpinit.vbs %Windir%\regsys.js %Windir%\SYSZAAcc.bat %Windir%\WinEffHj.vbs
The virus may also create one of the following folders:
%Windir%\4ieny5iC %Windir%\2HVjzBPf
The virus ascribes 'Hidden' and 'System' attributes to this folder.
The virus also creates the following files:
- %Temp%\wVbcg8IS.wj
If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
- Delete the original virus file (the location will depend on how the program originally penetrated the victim machine).
- If the following files are present on the computer, delete them:
%Windir%\setupset.bat %Windir%\helpinit.vbs %Windir%\regsys.js %Windir%\SYSZAAcc.bat %Windir%\WinEffHj.vbs %Temp%\wVbcg8IS.wj %Temp%\FqvC2WD.vbs %Windir%\jKmmOCFG.js
- If the following folders are present on the computer, delete
them:
%Windir%\4ieny5iC %Windir%\2HVjzBPf
- Update your antivirus databases and perform a full scan of the computer (download a trial version of Kaspersky Anti-Virus).
This virus is a BAT file. The size of the virus varies in size from 3KB to 21KB. Payload

Subscribe
Hot Articles