Virus W32/Hakaglan.worm.gen
Hi All,
My pc has affected by virus W32/Hakaglan.worm.gen.
It has disabled the Task Manager and Registries.
Upon execution the worm drops the following files:
%WINDIR%\SSVICHOSST.exe -> Worm Component
%SYSDIR%\SKCVHOSThk.dll -> Keylogger Component
%SYSDIR%\SKCVHOST.exe -> Keylogger Component
%SYSDIR%\SKCVHOSTr.exe -> Keylogger Component
Creates the following registry keys to hook at system startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\
Shell = Explorer.exe SSVICHOSST.exe
HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run\
Yahoo Messengger = %SYSDIR%\ SSVICHOSST.exe
The worm creates a job file (At1.job) which schedules to execute itself everyday at 09:00 hrs.
It is not allowing me to install updated antivirus.
Anybody has the solution of this virus.
Thanks,
Meghana
|