View Single Post
  #1  
Old 09-25-2007, 02:26 AM
meghana meghana is offline
Junior Member
 
Join Date: Sep 2007
Posts: 1
alert Virus W32/Hakaglan.worm.gen

Hi All,

My pc has affected by virus W32/Hakaglan.worm.gen.
It has disabled the Task Manager and Registries.

Upon execution the worm drops the following files:
%WINDIR%\SSVICHOSST.exe -> Worm Component
%SYSDIR%\SKCVHOSThk.dll -> Keylogger Component
%SYSDIR%\SKCVHOST.exe -> Keylogger Component
%SYSDIR%\SKCVHOSTr.exe -> Keylogger Component

Creates the following registry keys to hook at system startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\
“Shell” =” Explorer.exe SSVICHOSST.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\
“Yahoo Messengger” = “%SYSDIR%\ SSVICHOSST.exe”

The worm creates a job file (At1.job) which schedules to execute itself everyday at 09:00 hrs.

It is not allowing me to install updated antivirus.
Anybody has the solution of this virus.

Thanks,
Meghana
Reply With Quote