Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Soporte
Soporte 24 horas | Normas de contactar

Sus solicitudes

Perfil

Win32.HLLW.Autoruner2.20242

Added to the Dr.Web virus database: 2015-05-03

Virus description added:

Technical Information

Malicious functions:
To bypass firewall, removes or modifies the following registry keys:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
Network activity:
Connects to:
  • '<Private IP address>':5552
Miscellaneous:
Searches for the following windows:
  • ClassName: 'MS_WINHELP' WindowName: ''