BehavesLike.Win32.Generic.lc

Dmitry Sokolov recommends UnHackMe!

UnHackMe is a powerful tool against malware.

UnHackMe quickly removes rootkits/malware/adware/browser hijack issues!

: Solved! 5 Stars (5 / 5)

BehavesLike.Win32.Generic.lc also known as Trojan-Dropper, PAK_Generic.005.

Malware Analysis of BehavesLike.Win32.Generic.lc – MSACN32.DLL

Created files:

%SYSDIR%\GDI30.DLL
%SYSDIR%\LOCKIE.INI
%SYSDIR%\MSACN32.DLL
%SYSDIR%\MSWINSCK.OCX
%WINDIR%\LOCK.LOG

Autostart registry keys:

HKLM\SOFTWARE\CLASSES\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\INPROCSERVER32\: “%SYSDIR%\MSWINSCK.OCX”
HKLM\SOFTWARE\CLASSES\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\INPROCSERVER32\: “%SYSDIR%\MSWINSCK.OCX”
HKLM\SOFTWARE\CLASSES\CLSID\{47FE363A-0CEE-427D-BC3C-B7D8A6003F46}\INPROCSERVER32\: “%TEMP%\~DFA4307.TMP”
HKLM\SOFTWARE\CLASSES\CLSID\{94A1ADBF-7F8D-4B8A-B3FA-48E69CB4C804}\INPROCSERVER32\: “%TEMP%\~DFA6611.TMP”
HKLM\SOFTWARE\CLASSES\CLSID\{B007063B-34E1-4EA4-BC29-11D1AE806386}\INPROCSERVER32\: “%TEMP%\~DFA4307.TMP”

Detected by UnHackMe:

MSACN32.DLL
Default location: %SYSDIR%\MSACN32.DLL

Dropper hash(md5): 2a45be9b753d5dda7eb2affff6155b51

Written by 

Malware Hunter.

UnHackMe removes malware invisible for your antivirus!

Free Download

1
UnHackMe is compatible with most antivirus software.
UnHackMe is 100% CLEAN, which means it does not contain any form of malware, including adware, spyware, viruses, trojans and backdoors. VirusTotal (0/56).
System Requirements: Windows 2000-Windows 8.1/10. UnHackMe uses minimum of computer resources.

WordPress SEO fine-tune by Meta SEO Pack from Poradnik Webmastera