Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Win32.HLLW.Autoruner2.37421

Added to the Dr.Web virus database: 2018-04-26

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %HOMEPATH%\Start Menu\Programs\Startup\setup.js
Creates the following files on removable media:
  • <Drive name for removable media>:\setup.js
Modifies file system:
Creates the following files:
  • %TEMP%\aut1.tmp
  • %TEMP%\Setup.exe
  • %TEMP%\aut2.tmp
  • %TEMP%\setup.js
  • %TEMP%\dup2patcher.dll
Sets the 'hidden' attribute to the following files:
  • <Drive name for removable media>:\setup.js
Deletes the following files:
  • %TEMP%\aut1.tmp
  • %TEMP%\aut2.tmp
Miscellaneous:
Creates and executes the following:
  • '%TEMP%\Setup.exe'
  • '<SYSTEM32>\wscript.exe' "%TEMP%\setup.js"
Executes the following:
  • '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 30 /tn anydesk /tr "%TEMP%\setup.js