Filename:
regdtopt.exe

Related to:
Trojan.Ramvicrype

File Directory:
%UserProfile%\My Documents\
%UserAppData%\Identities\
%UserProfile%\Desktop\

Startup Type:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run\”Optim1″ = “regdtopt.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run\”Optim2″ = “%UserProfile%\My Documents\regdtopt.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run\”Optim3″ = “%UserAppData%\Identities\regdtopt.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run\”Optim4″ = “%UserProfile%\Desktop\regdtopt.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Run\”Optim[NUMBER]” = “[FOLDER CONTAINING INFECTED FILES]\regdtopt.exe”

Removal and Protection:
Deleting the file regdtopt.exe will not help in removing the threat on computer. Antivirus and Anti-Spyware Software are recommended for automatic removal and protection.