JavaScript support is required for our site to be fully operational in your browser.
Win32.HLLM.Reset.396
Added to the Dr.Web virus database: 2012-07-17
Virus description added: 2012-08-07
Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
[<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = ''
Malicious functions:
Executes the following:
<SYSTEM32>\reg.exe add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v load /t REG_EXPAND_SZ /d "C:\Realtek\Drivers\Drv7\DP_Sound_Realtek_wnt6\A6305\alсrmv.exe" /f
Download
Free three-month trial
All protection features available
Renew your trial license in
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK
