Per il corretto funzionamento del sito, è necessario attivare il supporto di JavaScript nel browser.
Win32.HLLW.Autoruner2.24086
Aggiunto al database dei virus Dr.Web:
2016-05-19
La descrizione è stata aggiunta:
2016-05-19
Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Taskman' = '%HOMEPATH%\aegvvp.exe'
Malicious functions:
Executes the following:
Injects code into
the following system processes:
Modifies file system:
Creates the following files:
Sets the 'hidden' attribute to the following files:
Network activity:
UDP:
DNS ASK mu###.###tal-protection.net.ru
DNS ASK sl###.##fehousenumber.com
'mu###.###tal-protection.net.ru':41801
'sl###.##fehousenumber.com':41801
Miscellaneous:
Searches for the following windows:
ClassName: 'Ojl' WindowName: 'Foijwmj Yaf Hfg, Vtelest, Fia'
ClassName: 'Vtelest, Fia, Ojl' WindowName: 'Foijwmj Yaf Hfg'
ClassName: 'Sxvnsqs. Kujgom' WindowName: 'Ptxnyfflq Qeujq'
ClassName: 'Ynprsomdgo Iwnm' WindowName: 'Xghte. Evcl Deukyl'
ClassName: 'Xgoql. Ve, Cuddot' WindowName: 'Kdjri Lsksusy, Nhv'
ClassName: 'Embehs Ikvfcs Cxun' WindowName: 'Embehs Ikvfcs Cxun'
ClassName: 'Eyqj. Qdgxyya Rev' WindowName: 'Jtbcckbax Tc, Oak'
ClassName: 'Cuddot' WindowName: 'Kdjri Lsksusy, Nhv, Xgoql. Ve'
ClassName: 'Tnq' WindowName: 'Tigy, Mdd. Juhcs, Rfjvy, Ele'
ClassName: 'Rfjvy, Ele, Tnq' WindowName: 'Tigy, Mdd. Juhcs'
ClassName: 'Hxg' WindowName: 'Uotr Ayjf. Icoiwnje, Mfgpdk. Crd'
ClassName: 'Mfgpdk. Crd, Hxg' WindowName: 'Uotr Ayjf. Icoiwnje'
ClassName: 'Eayjxi Hmjiiymu' WindowName: 'Iny, Oyao Tx, Jqm'
ClassName: 'Rijmnaxflq Ukxfkm' WindowName: 'Jgco Cpcnc Uema'
ClassName: 'Hjcbf Tjcim' WindowName: 'Hjcbf Tjcim'
ClassName: 'Cfdeolhhn Xxyisn R' WindowName: 'Uvdx Glmxb, Prckfok'
ClassName: 'Xnwpu Bslpyn Bjkhsn' WindowName: 'Pcvjsnp, Vuuq Hgmho'
ClassName: 'Ovuxjnb. Mc' WindowName: 'Ovuxjnb. Mc'
ClassName: 'Buoslsnd' WindowName: 'Lxfflgnrp Xwv, Ltr, Ewtsa'
ClassName: 'Ewtsa, Buoslsnd' WindowName: 'Lxfflgnrp Xwv, Ltr'
ClassName: 'Iuvxdhhm Kftr, Oiw' WindowName: 'Jqjms, Rmka. Qom'
ClassName: 'Mdmhgdua Nxcct. P' WindowName: 'Nuiqcitcl Fdspv'
ClassName: 'Kbgdgl. Btrnb M' WindowName: 'Mygdjqokivb Anoivfx'
ClassName: 'Oiw' WindowName: 'Jqjms, Rmka. Qom, Iuvxdhhm Kftr'
ClassName: 'Xfucicvx Hcr. T' WindowName: 'Mhhtpoov Lkgk, W'
ClassName: 'Hpjgqxtxn Mvgeowj' WindowName: 'Dcyu, Tgt. Uekwk'
ClassName: 'Lntbdk Iopf. Mptov' WindowName: 'Aqfbmtlhe Gxtra T'
ClassName: 'Fulfejxqd. Twcypdju' WindowName: 'Utkokdpu, Qbkw, Uc'
ClassName: 'Qhxnphrv Gul Fmqnsd' WindowName: 'Bsqcfb Eoft, Rde'
ClassName: 'Svmpatd Xiy Osbfjya' WindowName: 'Svmpatd Xiy Osbfjya'
ClassName: 'Kcsvx Ie' WindowName: 'Hcdoucj, Xbf, Wesyr, Rherjfa'
ClassName: 'Rherjfa, Kcsvx Ie' WindowName: 'Hcdoucj, Xbf, Wesyr'
Scaricate Dr.Web per Android
Gratis per 3 mesi
Tutti i componenti di protezione
Rinnovo versione di prova tramite AppGallery/Google Pay
Continuando a utilizzare questo sito, l'utente acconsente al nostro utilizzo di file Cookie e di altre tecnologie per la raccolta di informazioni statistiche sui visitatori. Per maggiori informazioni
OK