Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Soporte
Soporte 24 horas | Normas de contactar

Sus solicitudes

Perfil

Win32.HLLW.Autoruner2.664

Added to the Dr.Web virus database: 2013-12-27

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %HOMEPATH%\Start Menu\Programs\Startup\666.exe
Malicious functions:
Creates and executes the following:
  • '%WINDIR%\666.exe'
Executes the following:
  • '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %WINDIR%\555.JPG
Modifies file system :
Creates the following files:
  • %WINDIR%\555.JPG
  • %HOMEPATH%\Recent\555.lnk
  • %HOMEPATH%\Recent\WINDOWS.lnk
  • %TEMP%\aut1.tmp
  • %WINDIR%\666.exe
  • %TEMP%\aut2.tmp
Deletes the following files:
  • %TEMP%\aut2.tmp
  • %TEMP%\aut1.tmp
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'ShImgVw:CPreviewWnd' WindowName: '(null)'