Home Malware Programs Viruses Virus.Win32.Pioneer.bl

Virus.Win32.Pioneer.bl

Posted: March 11, 2013

Threat Metric

Threat Level: 1/10
Infected PCs: 27
First Seen: March 11, 2013
OS(es) Affected: Windows

Virus.Win32.Pioneer.bl is a computer virus that poses a serious security risk to an infected Windows computer. When infected, a system could load Virus.Win32.Pioneer.bl at startup of Windows and then allow it to create registry entries where it may perform other malicious actions without any indication to the computer user. Virus.Win32.Pioneer.bl may allow remote attackers to infiltrate the infected system where stored data may be put at risk. The modification of files and other settings may also occur from the Virus.Win32.Pioneer.bl infection.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%AppData%\Sun File name: %AppData%\Sun
Group: Malware file
%AppData%\Sun\Java File name: %AppData%\Sun\Java
Group: Malware file
%AppData%\Sun\Java\jre2.5.8 File name: %AppData%\Sun\Java\jre2.5.8
Mime Type: unknown/8
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{Value}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run = igfxext.exe = "%AppData%\Sun\Java\jre2.5.8\igfxext.exe /260HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
Loading...