Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Win32.HLLP.Qozah

Added to the Dr.Web virus database: 2012-01-27

Virus description added:

Technical Information

To ensure autorun and distribution:
Infects the following executable system files:
  • <SYSTEM32>\dllcache\hh.exe.new
  • <SYSTEM32>\dllcache\notepad.exe.new
  • <SYSTEM32>\dllcache\regedit.exe.new
  • %WINDIR%\hh.exe.new
  • %WINDIR%\notepad.exe.new
  • %WINDIR%\regedit.exe.new
Modifies file system :
Creates the following files:
  • <SYSTEM32>\dllcache\hh.exe.new
  • <SYSTEM32>\dllcache\notepad.exe.new
  • <SYSTEM32>\dllcache\regedit.exe.new
  • %WINDIR%\hh.exe.new
  • %WINDIR%\notepad.exe.new
  • %WINDIR%\regedit.exe.new