マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Win32.HLLW.Autoruner.12766

Added to the Dr.Web virus database: 2010-01-11

Virus description added:

Technical Information

Modifies file system :
Creates the following files:
  • C:\Recycled\~GLH0004.TMP
  • %WINDIR%\inf\~GLH0003.TMP
  • C:\Recycled\~GLH0006.TMP
  • %WINDIR%\Help\~GLH0005.TMP
  • C:\Recycled\~GLH0002.TMP
  • %TEMP%\GLG3.tmp
  • %TEMP%\GLC1.tmp
  • %WINDIR%\inf\~GLH0001.TMP
  • %WINDIR%\~GLH0000.TMP
Deletes the following files:
  • %TEMP%\GLC1.tmp
  • %TEMP%\GLG3.tmp
Moves the following files:
  • from C:\Recycled\~GLH0004.TMP to C:\Recycled\lip.dat
  • from %WINDIR%\Help\~GLH0005.TMP to %WINDIR%\Help\FKHFU.CHI
  • from C:\Recycled\~GLH0006.TMP to C:\Recycled\ctv.dat
  • from %WINDIR%\inf\~GLH0003.TMP to %WINDIR%\inf\iplbk.inf
  • from %WINDIR%\~GLH0000.TMP to %WINDIR%\kentgo.log
  • from %WINDIR%\inf\~GLH0001.TMP to %WINDIR%\inf\optkec.inf
  • from C:\Recycled\~GLH0002.TMP to C:\Recycled\qkf.dat
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'