威胁百科全书

HackTool.Win32.PowerRun.THHBHBE

Publish date: 九月 05, 2025
别名:

Win32/HackTool.PowerRun.B (NOD32)

平台:

Windows

总体风险等级:
潜在破坏:
潜在分布:
感染次数:
信息暴露:

  • 恶意软件类型: Hacking Tool

  • 有破坏性？: 没有

  • 加密？: 没有

  • In the Wild 是的

概要

感染途徑:

从互联网上下载, 下降了其他恶意软件


It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

技术详细信息

文件大小:

783,016 bytes

报告日期:

EXE

内存驻留:

No

初始樣本接收日期:

28 8月 2025

Payload:

修改文件

新病毒详细信息

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

其他详细信息

该程序执行以下操作：

  • It displays the following GUI:
  • It can be used to disable security-related processes and services in the system.
  • It can be used to execute malicious programs with elevated privileges.
  • It allows access to modify and delete critical system files.
  • It can run programs with TrustedInstaller privileges.

解决方案

最小扫描引擎:

9.800

SSAPI样式文件:

2.869.00

SSAPI样式发布日期:

04 9月 2025

Step 1

对于Windows ME和XP用户，在扫描前，请确认已禁用系统还原功能，才可全面扫描计算机。

Step 2

Note that not all files, folders, and registry keys and entries are installed on your computer during this malware's/spyware's/grayware's execution. This may be due to incomplete installation or other operating system conditions. If you do not find the same files/folders/registry information, please proceed to the next step.

Step 3

使用趋势科技产品扫描计算机，并删除检测到的HackTool.Win32.PowerRun.THHBHBE文件 如果检测到的文件已被趋势科技产品清除、删除或隔离，则无需采取进一步措施。可以选择直接删除隔离的文件。请参阅知识库页面了解详细信息。


请接受我们的调查！

通过以下社交网站联系我们