Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Win32.HLLW.MyBot.12064

Added to the Dr.Web virus database: 2019-09-29

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • <SYSTEM32>\win32snd.exe
Sets the 'hidden' attribute to the following files
  • <SYSTEM32>\win32snd.exe
Deletes itself.
Miscellaneous
Creates and executes the following
  • '<SYSTEM32>\win32snd.exe' 264 "<Full path to file>"
  • '<SYSTEM32>\win32snd.exe' 264 "<Full path to file>"' (with hidden window)