JavaScript support is required for our site to be fully operational in your browser.
Win32.HLLW.MyBot.12051
Added to the Dr.Web virus database:
2019-06-04
Virus description added:
2019-07-17
Technical Information
To ensure autorun and distribution
Modifies the following registry keys
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] 'Network Services' = '"<SYSTEM32>\odbc32.exe" /O0'
Creates the following services
[<HKLM>\System\CurrentControlSet\Services\Network Services] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\Network Services] 'ImagePath' = '"<SYSTEM32>\odbc32.exe" /srv /O0'
Modifies file system
Creates the following files
Miscellaneous
Creates and executes the following
'<SYSTEM32>\odbc32.exe' /O0
'<SYSTEM32>\odbc32.exe' /O0' (with hidden window)
By continuing to use this website, you are consenting to Doctor Web’s use of cookies and other technologies related to the collection of visitor statistics. Learn more
OK