Win32.HLLW.Gagse

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Gagse' = '%windir%\Gagse.exe'

Infects the following executable system files:

<SYSTEM32>\notepad.exe
<SYSTEM32>\freecell.exe
<SYSTEM32>\shrpubw.exe
<SYSTEM32>\charmap.exe
<SYSTEM32>\telnet.exe
<SYSTEM32>\shutdown.exe
<SYSTEM32>\logoff.exe
<SYSTEM32>\lights.exe
<SYSTEM32>\ftp.exe
<SYSTEM32>\rundll32.exe
<SYSTEM32>\calc.exe
<SYSTEM32>\mspaint.exe
<SYSTEM32>\osk.exe
<SYSTEM32>\cmd.exe
%WINDIR%\NOTEPAD.EXE
<SYSTEM32>\spider.exe
<SYSTEM32>\winmine.exe
<SYSTEM32>\mplay32.exe
<SYSTEM32>\sndrec32.exe
<SYSTEM32>\wuauclt.exe
<SYSTEM32>\mshearts.exe

Malicious functions:

Executes the following:

<SYSTEM32>\cmd.exe /c %WINDIR%\crazybat.bat

Modifies file system :

Creates the following files:

C:\Gagse\Swat all crack.exe
C:\Gagse\Nero all crack.exe
C:\Gagse\Macro Maker.exe
C:\Gagse\Hacker tool.exe
C:\Gagse\Delta Force Black hawk down Downloader.exe
C:\Gagse\Fix Blast.exe
C:\Gagse\123 Free Solitaire crack.exe
C:\Gagse\instant CD+DVD crack.exe
C:\Gagse\Dvix Player crack.exe
C:\Gagse\Ad aware 6 crack.exe
C:\Gagse\Mcafee crack all version.exe
C:\Gagse\Monapoly crack.exe
C:\Gagse\Winmx chat addon.exe
C:\Gagse\Norton systemworks 2003 crack.exe
C:\Gagse\Swat 3 Auto Downloader.exe
C:\Gagse\Postal 2 Downloader.exe
C:\Gagse\Moto GP 2003 Downloader.exe
C:\Gagse\Rainbow six Raven Shield Downloader.exe
C:\Gagse\GTA Vice City Downloader.exe
C:\Gagse\Osama Bin Laden Shot Game ver 1.0
C:\Gagse\Windows Update.exe
C:\Gagse\calc.exe
C:\Gagse\MSVC Downloader.exe
C:\Gagse\Visual Basic 6 Downloader.exe
C:\Gagse\Borland C++ 6 Downloader.exe
C:\Gagse\Fifa 2004 Downloader.exe
C:\Gagse\Max Payne 2 Downloader.exe
C:\Gagse\ISS Pro 3 Downloader.exe
C:\Gagse\Tiger Woods PGA Tour 2003 Downloader.exe
C:\Gagse\Windows longhorn crack.exe
C:\Gagse\Windows server crack.exe
C:\Gagse\Microsoft Autoroute Express 2003 crack.exe
C:\Gagse\Office XP crack.exe
C:\Gagse\Winamp crack play all audio and film formates.exe
C:\Gagse\Visual basic 5 and 6 serial crack.exe
C:\Gagse\Office 2000 crack.exe
C:\Gagse\Abode Photoshop crack.exe
C:\Gagse\Visual Fox crack.exe
C:\Gagse\Microsoft Mappoint 2002-2003 crack.exe
C:\Gagse\Visual C++ 6.0 Professional crack.exe
C:\Gagse\Microsoft office Professional 2003 crack.exe
C:\Gagse\Macromedia studio crack.exe
C:\Gagse\Power translator Pro 7.0 crack.exe
C:\Gagse\byte King add byte, kb, gb to your programs.exe
C:\Gagse\Kazaa Media Desktop super scan, Find over 200 more results.exe
C:\Gagse\Icon Maker.exe
C:\Gagse\Cineplayer crack all.exe
C:\Gagse\Norton Anti Virus 2004 crack by (Nor Cracker).exe
C:\Gagse\mamut business Software crack.exe
C:\Gagse\MSN Auto responder.exe
C:\Gagse\Sygate Personal Firewall addon more ports blocked.exe
C:\Gagse\Windows Personal Firewall crack.exe
C:\Gagse\MSN Bomber-Flooder and more by (Nor Hack).exe
C:\Gagse\Cracking tools.exe
C:\Gagse\Microsoft Word all crack by (NOR cracker).exe
C:\Gagse\Clone CD crack all versions.exe
C:\Gagse\WinISO crack by Glenn.exe
C:\Gagse\Aurobat reader 5 and 6 crack.exe
C:\Gagse\() XXX Movies For Free. Relly, Yes take a look ().exe
C:\Gagse\Gagse 0.6872151.exe
%WINDIR%\crazybat.bat
C:\Gagse\Chess Master 8000 Downloader.exe
C:\Gagse\Gagse 0.7477229.exe
C:\Gagse\Gagse 0.3624368.exe
C:\Gagse\Gagse 0.9606837.exe
C:\Gagse\Gagse 0.5837168.exe
C:\Gagse\Tomb Raider 3 Downloader.exe
C:\Gagse\Age Of Mythology Downloader.exe
C:\Gagse\Enter The Matrix Downloader.exe
C:\Gagse\Command & Conquer - Generals Downloader.exe
C:\Gagse\Erotica Island Downloader (Adult Game).exe
C:\Gagse\Risk 2 Downloader.exe
C:\Gagse\Red Alert 2 Downloader.exe
C:\Gagse\Gagse 0.149555.exe
C:\Gagse\Gagse 0.547372.exe
C:\Gagse\Gagse 0.2636479.exe
C:\Gagse\Gagse 0.2812313.exe
C:\Gagse\Gagse 6.257707E-02.exe
C:\Gagse\Gagse 0.215072.exe
C:\Gagse\Gagse 0.5977163.exe
C:\Gagse\Gagse 0.7656801.exe
C:\Gagse\Gagse 0.7113937.exe
C:\Gagse\Gagse 8.168977E-02.exe
C:\Gagse\Gagse 5.455089E-02.exe
C:\Gagse\Gagse 0.8764201.exe
C:\Gagse\Gagse 0.4712727.exe
C:\Gagse\Gagse 0.4606803.exe
C:\Gagse\Gagse 3.690398E-02.exe
C:\Gagse\Soldier of fortune 2 Downloader.exe
C:\Gagse\Sim City 4 Downloader.exe
C:\Gagse\Nukem Downloader.exe
C:\Gagse\Resident Evil Downloader.exe
C:\Gagse\[Game] Video Strip Poker.exe
C:\Gagse\Worms 3D Downloader.exe
C:\Gagse\Conflict Desert Storm Downloader.exe
C:\Gagse\Vietcong Downloader.exe
C:\Gagse\Need For speed underground Downloader.exe
C:\Gagse\Splinter Cell Downloader all disc`s.exe
C:\Gagse\Colin Mcrae Rally 3 Downloader.exe
C:\Gagse\Madden 2004 Downloader.exe
C:\Gagse\Lord of the rings Downloader.exe
C:\Gagse\Medal of honor allied assult 2 disc`s Downloader.exe
C:\Gagse\[Game] Snake ver7.7.exe
C:\Gagse\Robin Hood Downloader.exe
C:\Gagse\WORM WORM WORM WORM GAGSE WORM WORM WORM WORM.exe
C:\Gagse\(APP) Kazaa Popup Blocker ver 4.5 by midio.exe
C:\Gagse\Call of Duty Downloader.exe
C:\Gagse\Halo Combat Evolved Downloader.exe
C:\Gagse\Need For speen Hot Pursuit 2 Downloader.exe
C:\Gagse\Battlefield 1942 Road to rome Downloader.exe
C:\Gagse\[Game] Formula 1 Racer.exe
C:\Gagse\[Game] Super drag racer 3.exe
C:\Gagse\[Game] Need for speed Demo.exe
C:\Gagse\[App] cracking.exe
C:\Gagse\[Game] XXX Erotica Dreams.exe
C:\Gagse\[App] Free cell phone calls.exe
C:\Gagse\[App] Hacking.exe
C:\Gagse\poser crack by Osen.exe
C:\Gagse\Call of Duty crack.exe
C:\Gagse\Medal of honor spearhead crack.exe
C:\Gagse\Jedi Academy crack.exe
C:\Gagse\IL-2 Sturmovik - Forgotten battle crack.exe
C:\Gagse\Commandos 3 Destination Berlin crack.exe
C:\Gagse\Enter the matrix crack.exe
C:\Gagse\Red Faction crack.exe
C:\Gagse\Halo Combat Evolved crack.exe
C:\Gagse\Patrician 3 crack.exe
C:\Gagse\Elite force crack.exe
C:\Gagse\Devastation crack.exe
C:\Gagse\nascar Thunder crack.exe
C:\Gagse\The lord of the rings all crack.exe
C:\Gagse\Max payne all crack.exe
C:\Gagse\Runaway crack.exe
C:\Gagse\C++ keygen.exe
C:\Gagse\Nero 6 keygen.exe
C:\Gagse\Dragon Naturally crack.exe
C:\Gagse\Visual Basic 6 keygen.exe
C:\Gagse\Microsoft XP crack.exe
C:\Gagse\Windows ME crack.exe
C:\Gagse\Windows 95,98 crack.exe
C:\Gagse\Warcraft 3 crack.exe
C:\Gagse\Tropico 2 crack.exe
C:\Gagse\Mafia all cd`s crack.exe
C:\Gagse\NFSU crack.exe
C:\Gagse\ISObuster crack.exe
C:\Gagse\Tiger woods PGA Tour 2003 crack.exe
C:\Gagse\Splinter cell crack.exe
C:\Gagse\pac Man Adventure crack.exe
C:\Gagse\tycoon mall crack.exe
C:\Gagse\Chess mAster crack.exe
C:\Gagse\half life crack.exe
C:\Gagse\Shrek crack.exe
C:\Gagse\Need for speed universial crack works on all games.exe
C:\Gagse\Harry Potter crack.exe
<SYSTEM32>\NgcTraceRoute.exe
%WINDIR%\Gagse.exe
%WINDIR%\InstallRemover.exe
%PROGRAM_FILES%\MSN Gaming Zone\lobby.exe
C:\Gagse\All worms games crack.exe
C:\Gagse\monopoly tycoon crack.exe
C:\Gagse\Hoyle card games crack.exe
C:\Gagse\Free Space 2 crack.exe
C:\Gagse\Barbie Riding Club crack.exe
C:\Gagse\Rice of nations crack.exe
C:\Gagse\V8 challenge crack.exe
C:\Gagse\Bloodmoon crack.exe
C:\Gagse\Tribes 2 crack.exe
C:\Gagse\Neverwinter Nights crack.exe
C:\Gagse\Crime Scene investigation crack.exe
C:\Gagse\Resident Evil 3 crack.exe
C:\Gagse\All star wars games crack.exe
C:\Gagse\Championship manager 4 crack.exe
C:\Gagse\Tron 2 crack.exe
C:\Gagse\ETM crack.exe
C:\Gagse\Madden NHL 2004 crack.exe
C:\Gagse\nascar racing 4 crack.exe
C:\Gagse\Fireball.exe
C:\Gagse\Nero addons.exe
C:\Gagse\DVD Player crack.exe
C:\Gagse\Free cell phone calls with this program by (vc++Rxpert).exe
C:\Gagse\Quick MX v1.2.5 With over 30 options (NEW).exe
C:\Gagse\Albumwrap extractor.exe
C:\Gagse\Google Popup Blocker install.exe
C:\Gagse\RCMS 6.0 + Nushi Chat 2.5 with all addons + MXMonitor (ENG) install.exe
C:\Gagse\Diablo 2 crack.exe
C:\Gagse\Vietcong crack.exe
C:\Gagse\Rainbow six 3 raven shield crack.exe
C:\Gagse\Doom all crack.exe
C:\Gagse\Medal of honor allied assult crack.exe
C:\Gagse\Midnight club crack.exe
C:\Gagse\madden 2004 crack.exe
C:\Gagse\Ultimate Password cracker for zip and rar + now most wepsites.exe
C:\Gagse\Mcafee 7.0 crack.exe
C:\Gagse\Jasc Paint Shop Pro 7 crack.exe
C:\Gagse\PageMaker 7.0 crack.exe
C:\Gagse\Datacraft crack.exe
C:\Gagse\Nero 6 crack by (crackerNOR).exe
C:\Gagse\Norton systemworks 2004 crack.exe
C:\Gagse\Borland C++ 6 crack.exe
C:\Gagse\Alcohol 120% all versions keygen.exe
C:\Gagse\Nero all keygen.exe
C:\Gagse\Mp3 Splitter, Splitt albums with this tool.exe
C:\Gagse\Paint Shop pro premium v 8.0 crack.exe
C:\Gagse\Microsoft money 2003-2004 crack.exe
C:\Gagse\Sony Sonicstage crack.exe
C:\Gagse\Aurobat reader 6 crack.exe
C:\Gagse\Roller coaster tycoon all crack.exe
C:\Gagse\Counter Strike crack.exe
C:\Gagse\GTA 4 Vice city crack.exe
C:\Gagse\Street fighter crack.exe
C:\Gagse\Desert storm crack.exe
C:\Gagse\Tekken 4 crack.exe
C:\Gagse\Nascar Racing 2003 crack.exe
C:\Gagse\Monapoly 3D crack.exe
C:\Gagse\Visual studio crack.exe
C:\Gagse\Easy CD creator crack.exe
C:\Gagse\Erotica Island crack.exe
C:\Gagse\Microsoft Golf crack.exe
C:\Gagse\No one lives forever crack.exe
C:\Gagse\Flight sim 2004 crack.exe
C:\Gagse\Age of mytholigy crack.exe
C:\Gagse\Toca Pro Race Driver crack.exe
C:\Gagse\Colin Mcrae rally 3 crack.exe
C:\Gagse\Unreal 2003 crack.exe
C:\Gagse\Delta Force Black Hawk down crack.exe
C:\Gagse\Moto GP 2003 crack.exe
C:\Gagse\Command & Conquer Generals crack.exe
C:\Gagse\Tomb Raider all crack.exe
C:\Gagse\Star trek crack.exe
C:\Gagse\Sniper crack.exe
C:\Gagse\CS Internet crack.exe
C:\Gagse\Tony Hawk pro skater 4 crack.exe
C:\Gagse\Fifa 2004 crack.exe
C:\Gagse\Postal 2 crack.exe
C:\Gagse\Gran Prix 4 crack.exe

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_traywnd' WindowName: ''
ClassName: 'Progman' WindowName: ''

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information