Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Win32.HLLW.Autoruner2.48184

Added to the Dr.Web virus database: 2018-11-13

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following files on removable media:
  • <Drive name for removable media>:\Cristiano Ronaldo.jpg.lnk
Modifies file system:
Creates the following files:
  • <Current directory>\ASPENET.bat
  • <Current directory>\SchedLgUt.Txt
Network activity:
Connects to:
  • 'sa####dz.no-ip.biz':8822
UDP:
  • DNS ASK sa####dz.no-ip.biz
Miscellaneous:
Searches for the following windows:
  • ClassName: 'TApplication' WindowName: '<File name>'
  • ClassName: '#32770' WindowName: 'Gestionnaire des t?ches de Windows'
  • ClassName: '#32770' WindowName: 'Gestionnaire des tвches de Windows'
  • ClassName: '#32770' WindowName: ''
  • ClassName: 'SysListView32' WindowName: 'processus'
Executes the following:
  • '<SYSTEM32>\cmd.exe' /c ASPENET.bat