Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Win32.HLLW.Autoruner2.41514

Added to the Dr.Web virus database: 2018-07-14

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %HOMEPATH%\Start Menu\Programs\Startup\RtkNGUI64.exe.lnk
Creates the following files on removable media:
  • <Drive name for removable media>:\Realtek\<File name>.exe
Modifies file system:
Creates the following files:
  • C:\{4F2025EB-A892-456D-B8B0-70347BA0420B}\1K1KP
  • C:\{4F2025EB-A892-456D-B8B0-70347BA0420B}\51G99
Sets the 'hidden' attribute to the following files:
  • <Drive name for removable media>:\Realtek\<File name>.exe