Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Win32.HLLP.Whboy.4.origin

Added to the Dr.Web virus database: 2021-05-08

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • <Current directory>\voice_tweak.exe.exe.exe
  • %TEMP%\19$$.bat
  • %WINDIR%\syswow64\drivers\nvscv32.exe
Deletes itself.
Miscellaneous
Creates and executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\19$$.bat' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\19$$.bat