Meine Bibliothek
Meine Bibliothek

+ Zur Bibliothek hinzufügen

Support

Ihre Anfragen

Rufen Sie uns an

+7 (495) 789-45-86

Profil

Win32.HLLW.Autoruner2.25123

Added to the Dr.Web virus database: 2016-09-03

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following files on removable media:
  • <Drive name for removable media>:\autorun.inf
  • <Drive name for removable media>:\myDisk\drivers.exe
Malicious functions:
Executes the following:
  • '<SYSTEM32>\cmd.exe' /C echo. > "%APPDATA%\scvhost.exe":Zone.Identifier
Modifies file system:
Creates the following files:
  • %APPDATA%\HelpButton.dll
  • %APPDATA%\Introvert.mLM
  • %APPDATA%\scvhost.exe
  • %TEMP%\nsv2.tmp\System.dll
  • %APPDATA%\keymap.xml
  • %APPDATA%\disconnect.png
  • %APPDATA%\FootmanCommissionaire.t
  • %APPDATA%\AUTHORS
  • %APPDATA%\settings.xrc
Sets the 'hidden' attribute to the following files:
  • <Drive name for removable media>:\autorun.inf
  • <Drive name for removable media>:\myDisk\drivers.exe