Troj/MSIL-HI

Category: Viruses and Spyware Protection available since:10 Nov 2013 10:42:10 (GMT)
Type: Trojan Last Updated:10 Nov 2013 10:42:10 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

Troj/MSIL-HI exhibits the following characteristics:

File Information

Size
313K
SHA-1
24c1bccb625326792a66463e2b81213505e2bab4
MD5
eccfa025102679ed7c99a4bc58d4e8ee
CRC-32
88c5a48c
File type
Windows executable
First seen
2013-11-05

Other vendor detection

Avira
TR/Dropper.MSIL.12386

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Application Data\Microsoft\wire.exe
Registry Keys Created
  • HKCU\Software\Microsoft\Windows\CurrentVersion\Run
    dangerouuuu
    "c:\Documents and Settings\test user\Application Data\Microsoft\wire.exe"
Processes Created
  • c:\Documents and Settings\test user\application data\microsoft\wire.exe
DNS Requests
  • spancer.zapto.org

download Try Sophos products for free
Download now