Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Win32.HLLW.Autoruner1.1108

Added to the Dr.Web virus database: 2011-10-30

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\explorer.exe
Creates the following files on removable media:
  • <Drive name for removable media>:\Do not Enter.exe
  • <Drive name for removable media>:\My Videos.exe
  • <Drive name for removable media>:\autorun.inf
  • <Drive name for removable media>:\New Folder.exe
  • <Drive name for removable media>:\Data.bat
  • <Drive name for removable media>:\SoftWear.exe
  • <Drive name for removable media>:\Photos.exe
  • <Drive name for removable media>:\ReadMe.pif
Modifies file system :
Creates the following files:
  • C:\Photos.exe
  • C:\My Videos.exe
  • C:\Data.bat
  • C:\ReadMe.pif
  • C:\Do not Enter.exe
  • <Current directory>\autorun.inf
  • <Current directory>\Do Not Click Me !.bat
  • C:\New Folder.exe
  • <SYSTEM32>\explorer.exe
  • <Current directory>\SoftWear.exe
  • <Current directory>\Data.bat
  • C:\autorun.inf
  • <SYSTEM32>\tskmgr.EXE
  • <Current directory>\ReadMe.pif
  • <Current directory>\Do not Enter.exe
  • C:\SoftWear.exe
  • <Current directory>\Photos.exe
  • <Current directory>\My Videos.exe