Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Win32.HLLW.Autoruner.46782

Added to the Dr.Web virus database: 2012-07-23

Virus description added:

Technical Information

Malicious functions:
To complicate detection of its presence in the operating system,
blocks the following features:
  • User Account Control (UAC)
Creates and executes the following:
  • <LS_APPDATA>\Xenocode\ApplianceCaches\1.exe_v2E07E9C5\Native\STUBEXE\@SYSTEM@\Lsas.exe
Modifies file system :
Creates the following files:
  • %WINDIR%\Systemp.txt
  • <SYSTEM32>\Lsas.exe
Deletes the following files:
  • %TEMP%\~DF566B.tmp
Network activity:
Connects to:
  • 'jy####.no-ip.info':2185
UDP:
  • DNS ASK jy####.no-ip.info