Associated Malware Groups
The filename is associated with the malware group:
File Behavior
HOSTOE.DLL has been seen to perform the following behavior:
- Registers a Dynamic Link Libray (DLL) File
- Executes a Dynamic Link Library File as a process
- Found on infected systems and resists interrogation by security products
- Writes to another Process's Virtual Memory (Process Hijacking)
HOSTOE.DLL has been the subject of the following behavior:
- The process is hooked into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
- Registered as a Dynamic Link Library File
- Created as a process on disk
- Deleted as a process from disk
- Executed as a Process
- Registered as a Dynamic Link Libray (DLL) File
- Executed as a process
Country Of Origin
The filename HOSTOE.DLL was first seen on Jun 26 2007 in the following geographical regions of the Prevx community:
- The EUROPEAN UNION on Jun 26 2007
- MALAYSIA on Jun 26 2007
- The UNITED STATES on Jun 26 2007
- NETHERLANDS on Jun 26 2007
- The UNITED KINGDOM on Jul 17 2007
- URUGUAY on Aug 2 2007
- BULGARIA on Sep 9 2008
File Name Aliases
HOSTOE.DLL can also use the following file names:
- HOSTOE.DLL__DELETE_ON_REBOOT
- 5CAB60E3-8695-4132-AC28-A03F61
- 1FA4C11A-E105-4161-BBC7-071B38
- HOSTOE.DL
- BD84C12C-ABE8-490A-8F2C-81F872
- HOSTŸŸŸŸLL
- SEEKMO
- U‹ÌƒÌ SVHÀTT
- SAMPLE.V
- HOAUKELY
Filesizes
The following file size has been seen:
- 140,552 bytes
- 143,360 bytes
File Type
The filename HOSTOE.DLL refers to many versions of a dynamic link library.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.