|Detected||Feb 14 2011 04:17 GMT|
|Released||Feb 14 2011 08:27 GMT|
File size of 43008 bytes.
Ensures Using the system registry, system services or special system files, the program can launch itself or launch the creation of its files every time the Windows OS is subsequently booted autorun of the following installed files:
|Displayed service name:||Windows81|
|Startup parameters||Windows system directory (usually, C:\Windows\System32) %System%\WinH81.exe|
[ System registry hive HKEY_LOCAL_MACHINEHKLM\SYSTEM\ControlSet001\Services\WinH81 ] "Description" = "Windows Help System81"
This type of behaviour covers malicious programs that delete, block, modify, or copy data, disrupt computer or network performance, but which cannot be classified under any of the behaviours identified above.
This classification also covers “multipurpose” Trojan programs, i.e. those that are capable of conducting several actions at once and which demonstrate several Trojan behaviours in a single program. This means they cannot be indisputably classified as having any single behaviour.