Technical Information
Malicious functions:
Sets a new unauthorized home page for Windows Internet Explorer.
Modifies file system :
Creates the following files:
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\hwid.site90[1]
Deletes the following files:
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00079
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00078
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00081
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00080
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00077
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00074
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00073
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00076
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00075
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00088
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00087
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00090
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00089
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00086
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00083
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00082
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00085
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00084
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00061
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00060
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00063
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00062
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00059
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00056
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00055
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00058
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00057
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00070
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00069
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00072
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00071
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00068
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00065
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00064
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00067
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00066
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00115
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00114
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00116
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00113
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00110
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00109
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00112
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00111
- %WINDIR%\$NtUninstallWIC$\spuninst\updspapi.dll
- %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt
- %WINDIR%\AppPatch\AcGenral.dll
- %WINDIR%\0.log
- %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.inf
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.txt
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.inf
- %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.exe
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\updspapi.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00097
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00096
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00099
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00098
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00095
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00092
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00091
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00094
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00093
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00106
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00105
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00108
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00107
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00104
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00101
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00100
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00103
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00102
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00054
- %WINDIR%\system\WINSPOOL.DRV
- %WINDIR%\system\WFWNET.DRV
- <SYSTEM32>\-1
- <SYSTEM32>\$winnt$.inf
- %WINDIR%\system\VGA.DRV
- %WINDIR%\system\TAPI.DLL
- %WINDIR%\system\SYSTEM.DRV
- %WINDIR%\system\VER.DLL
- %WINDIR%\system\TIMER.DRV
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00013
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msisip.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00015
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00014
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msimsg.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msi.dll
- <SYSTEM32>\1033\dwintl.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msihnd.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msiexec.exe
- %WINDIR%\system\MCISEQ.DRV
- %WINDIR%\system\MCIAVI.DRV
- %WINDIR%\system\MMSYSTEM.DLL
- %WINDIR%\system\MCIWAVE.DRV
- %WINDIR%\system\LZEXPAND.DLL
- %WINDIR%\system\AVIFILE.DLL
- %WINDIR%\system\AVICAP.DLL
- %WINDIR%\system\KEYBOARD.DRV
- %WINDIR%\system\COMMDLG.DLL
- %WINDIR%\system\SHELL.DLL
- %WINDIR%\system\setup.inf
- %WINDIR%\system\stdole.tlb
- %WINDIR%\system\SOUND.DRV
- %WINDIR%\system\OLESVR.DLL
- %WINDIR%\system\MOUSE.DRV
- %WINDIR%\system\MMTASK.TSK
- %WINDIR%\system\OLECLI.DLL
- %WINDIR%\system\MSVIDEO.DLL
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00040
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00039
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00042
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00041
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00038
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00035
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00034
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00037
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00036
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00051
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00048
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00053
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00052
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00047
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00044
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00043
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00046
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00045
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00022
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00021
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00024
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00023
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00020
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00017
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00016
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00019
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00018
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00031
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00030
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00033
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00032
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00029
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00026
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00025
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00028
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00027
Network activity:
Connects to:
- 'hw##.site90.net':80
- 'localhost':1036
TCP:
HTTP GET requests:
- hw##.site90.net/
UDP:
- DNS ASK hw##.site90.net
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
