La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Win32.HLLW.Autoruner.53234

Aggiunto al database dei virus Dr.Web: 2011-07-03

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Creates the following files on removable media:
  • <Drive name for removable media>:\autorun.exe
  • <Drive name for removable media>:\autorun.inf
Malicious functions:
Searches for windows to
detect programs and games:
  • ClassName: 'gdkWindowToplevel' WindowName: ''
Modifies file system :
Creates the following files:
  • %APPDATA%\%USERNAME%@USER-4BB09A9C02 3.6.txt
Sets the 'hidden' attribute to the following files:
  • <Drive name for removable media>:\autorun.exe
  • <Drive name for removable media>:\autorun.inf
Deletes the following files:
  • %APPDATA%\%USERNAME%@USER-4BB09A9C02 3.6.txt
Network activity:
Connects to:
  • 'th####atebay.org':80
  • 'he####l.he.ohost.de':21
TCP:
HTTP GET requests:
  • th####atebay.org/top/301
UDP:
  • DNS ASK th####atebay.org
  • DNS ASK he####l.he.ohost.de
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: 'SmartSniff' WindowName: ''