Per il corretto funzionamento del sito, è necessario attivare il supporto di JavaScript nel browser.
Win32.HLLW.Autoruner1.204
Aggiunto al database dei virus Dr.Web:
2011-10-24
La descrizione è stata aggiunta:
2011-10-25
Technical Information
Malicious functions:
Modifies settings of Windows Internet Explorer:
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnonBadCertRecving' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnOnZoneCrossing' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
Modifies file system :
Creates the following files:
%HOMEPATH%\Desktop\System Restore.lnk
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\System Restore.lnk
%HOMEPATH%\Start Menu\Programs\System Restore\Uninstall System Restore.lnk
%ALLUSERSPROFILE%\Application Data\qgwRw6PGPYic2
%HOMEPATH%\Start Menu\Programs\System Restore\System Restore.lnk
Moves itself:
from <Full path to virus> to %ALLUSERSPROFILE%\Application Data\qgwRw6PGPYic2.exe
Network activity:
Connects to:
'un###otlub.com':80
'st####520186.com':80
'ma###ture.com':80
'op###994233.com':80
'du###ory.com':80
'wi###722866.com':80
TCP:
HTTP GET requests:
st####520186.com/britix/a
un###otlub.com/britix/ar
un###otlub.com/britix/a
ma###ture.com/britix/ar
ma###ture.com/britix/a
st####520186.com/britix/ar
du###ory.com/britix/ar
op###994233.com/britix/ar
du###ory.com/404.php?ty#################################################
op###994233.com/britix/a
du###ory.com/britix/a
wi###722866.com/britix/ar
wi###722866.com/britix/a
UDP:
DNS ASK un###otlub.com
DNS ASK st####520186.com
DNS ASK ma###ture.com
DNS ASK wi###722866.com
DNS ASK op###994233.com
DNS ASK du###ory.com
'<Private IP address>':1034
Miscellaneous:
Searches for the following windows:
ClassName: 'Shell_TrayWnd' WindowName: ''
Scaricate Dr.Web per Android
Gratis per 3 mesi
Tutti i componenti di protezione
Rinnovo versione di prova tramite AppGallery/Google Pay
Continuando a utilizzare questo sito, l'utente acconsente al nostro utilizzo di file Cookie e di altre tecnologie per la raccolta di informazioni statistiche sui visitatori. Per maggiori informazioni
OK