Para el funcionamiento correcto del sitio web, debe activar el soporte de JavaScript en su navegador.
Win32.HLLW.Autoruner1.204
Added to the Dr.Web virus database:
2011-10-24
Virus description added:
2011-10-25
Technical Information
Malicious functions:
Modifies settings of Windows Internet Explorer:
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnonBadCertRecving' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnOnZoneCrossing' = '00000000'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
Modifies file system :
Creates the following files:
%HOMEPATH%\Desktop\System Restore.lnk
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\System Restore.lnk
%HOMEPATH%\Start Menu\Programs\System Restore\Uninstall System Restore.lnk
%ALLUSERSPROFILE%\Application Data\qgwRw6PGPYic2
%HOMEPATH%\Start Menu\Programs\System Restore\System Restore.lnk
Moves itself:
from <Full path to virus> to %ALLUSERSPROFILE%\Application Data\qgwRw6PGPYic2.exe
Network activity:
Connects to:
'un###otlub.com':80
'st####520186.com':80
'ma###ture.com':80
'op###994233.com':80
'du###ory.com':80
'wi###722866.com':80
TCP:
HTTP GET requests:
st####520186.com/britix/a
un###otlub.com/britix/ar
un###otlub.com/britix/a
ma###ture.com/britix/ar
ma###ture.com/britix/a
st####520186.com/britix/ar
du###ory.com/britix/ar
op###994233.com/britix/ar
du###ory.com/404.php?ty#################################################
op###994233.com/britix/a
du###ory.com/britix/a
wi###722866.com/britix/ar
wi###722866.com/britix/a
UDP:
DNS ASK un###otlub.com
DNS ASK st####520186.com
DNS ASK ma###ture.com
DNS ASK wi###722866.com
DNS ASK op###994233.com
DNS ASK du###ory.com
'<Private IP address>':1034
Miscellaneous:
Searches for the following windows:
ClassName: 'Shell_TrayWnd' WindowName: ''
Descargue Dr.Web para Android
Gratis por 3 meses
Todos los componentes de protección
Renovación de la demo a través de AppGallery/Google Pay
Si Vd. continúa usando este sitio web, esto significa que Vd. acepta el uso de archivos Cookie y otras tecnologías para que recabemos las estadísticas sobre los visitantes. Más información
OK