La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Win32.HLLM.Fear.32

Aggiunto al database dei virus Dr.Web: 2013-12-15

La descrizione è stata aggiunta:

Technical Information

Malicious functions:
Terminates or attempts to terminate
the following user processes:
  • mpftray.exe
  • GUARD.EXE
  • fsav32.exe
  • NAVAPW32.EXE
  • ntvdm.exe
  • ZONEALARM.EXE
  • zapro.exe
  • AVP.EXE
  • AVGCTRL.EXE
  • AVGCC32.EXE
  • AVP32.EXE
  • AVSYNMGR.EXE
  • AVPM.EXE
  • AVPCC.EXE
Modifies file system :
Deletes the following files:
  • <SYSTEM32>\wbem\Performance\WmiApRpl.ini
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'