UHVJSUL.DLL - Dangerous

What you should do about UHVJSUL.DLL:

Check Your PC Now
You should urgently check your PC and remove any malicious software including UHVJSUL.DLL as soon as possible. The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't take the risk, check your PC now by clicking the green button.

Download Prevx CSI Now

Who Uses Prevx CSI?

Prevx has been detecting the threats that others miss since 2004.

More than 2,093,738 people have scanned with Prevx CSI and between them have checked 31.0 billion files. 69% of the PCs scanned had malware present.

What we know about UHVJSUL.DLL:

UHVJSUL.DLL

AUTOMATED MALWARE PROFILE, ANALYSIS, REMOVAL AND SIGNATURE INFORMATION:

DEFINITION OF: UHVJSUL.DLL

  • Safety Rating: Known Malware, do not run
  • Malware Family: Part of Malware group - Covert Sys Exec
  • Determination: Automatically determined using Prevx centralized heuristics
  • Malware Form: EXPLOIT
  • Protection: Prevx provides powerful security products that you can use to detect, remove and protect you from UHVJSUL.DLL and safeguard your PC against viruses, trojans, worms, spyware, rootkits and adware
  • Why risk having spyware on your PC when it takes less than 2 minutes to thoroughly check it with Prevx CSI? Click here to check your PC with Prevx CSI Now.
  • First seen: Sep 18 2006 (GMT)
  • Last seen: Sep 18 2006 (GMT)
  • File Size: 94,208 bytes
MALWARE ASSESSMENT: PREVX 4 AXES OF EVIL METHODOLOGY

1. COVERT ANALYSIS OF: UHVJSUL.DLL

  • File Names Used: 37
  • Paths Used: 33
  • Common File Name: UHVJSUL.DLL
  • Common Path: %WINDIR%\SYSTEM32\
  • Vendor Information: No Vendor details specified
  • UHVJSUL.DLL may use 37 or more path and file names, these are the most common:
  • 1 :%APPDATA%\SECTASKMAN\UHVJSUL.DLL.Q_8047001_Q
  • 2 :%honeypotroot%\334C34061B999143AD1CB9C1A198.....pmw
  • 3 :%WINDIR%\SYSTEM32\1UHVJSUL.DL1
  • 4 :%WINDIR%\SYSTEM32\MFC3113.TMP
  • 5 :%WINDIR%\SYSTEM32\UHVJS77UL.DLL
  • 6 :%WINDIR%\SYSTEM32\UHVJSUL.DLL(1).VIR
  • 7 :%WINDIR%\SYSTEM32\UHVJSUL.DLL.TCF
  • 8 :%WINDIR%\SYSTEM32\UHVJSUL.DLL_TOBEDELETED
  • 9 :%WINDIR%\SYSTEM32\UHVJSUL.VDLL
  • 10:%WINDIR%\SYSTEM32\UHVJSUL_DLL.VIR
  • 11:?:\!killbox\UHVJSUL.DLL( 1)
  • 12:?:\A00000000
  • 13:?:\recoverybin\volume-ca1... jr\desktop\new folder\UHVJSUL(01C6E464896D3109).DLL
  • 14:?:\recoverybin\volume-ca1... jr\desktop\new folder\UHVJSUL(01C6E46F49A90006).DLL
  • File Name Structure: Normal
  • File and Path Structure: Suspicious, unusually high number of file and path combinations

2. RELATIONSHIP ANALYSIS OF: UHVJSUL.DLL

  • Malicious Objects Created: None
  • Malicious Creators: 1
  • Malware Run Keys: Has registry run keys created by known malware objects
  • Self Persists: Yes, creates copies of itself
  • Antivirus Detection: No third party antivirus detection observed
  • Anti-Spyware Detection: No third party anti-spyware detection observed

3. ACTIVITY ANALYSIS OF: UHVJSUL.DLL

  • The following behaviors have been observed for this object:
  • Invokes dll components.

4. PROPAGATION ANALYSIS OF: UHVJSUL.DLL

  • Malware Group Propagation Rate: Moderate (spreading)
  • Malware Group: Covert Sys Exec
  • Copyright Prevx Limited 2005, 2006

Copyright PrevxCopyright Prevx Ltd
Page Generated on May 17, 2008 2:32