HPsus/Palevo-A

Category: Suspicious Behavior and Files
Type: Suspicious behavior

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

HPsus/Palevo-A exhibits the following characteristics:

File Information

Size
72K
SHA-1
b05ed5d64529eeb96ba3085d75a2617c80c74d1a
MD5
2cc438f7daaa7558f5b9cf20a6117d4c
CRC-32
a1c8c0dc
File type
application/x-ms-dos-executable
First seen
2011-04-07

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\fswagz.exe
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
    Taskman
    c:\Documents and Settings\test user\fswagz.exe
Processes Created
  • c:\windows\system32\svchost.exe
DNS Requests
  • jebena.ananikolic.su
  • peer.pickeklosarske.ru

download Try Sophos products for free
Download now