Home / malware

PDF

W32.Xpiro.I

First posted on 04 November 2015.
Source: Symantec

Aliases :

There are no other names known for W32.Xpiro.I.

Explanation :

When the virus is executed, it creates the following mutexes to ensure that only one instance can run on the compromised computer:kkq-vx_mtx1gazavat-svckkq-vx_mtx35
Next, the virus infects .exe files on the computer.

The virus then gathers the following information and uploads it to a remote location: Language detailsProduct IDsSystem volume informationOS information

Last update 04 November 2015

 

TOP