Win32/Hakaglan.worm

Hi,

Have you ever heard of this virus. It's effected most of the PC's and was transferd to the USB's in my workplace. It keep on creating files which you cant delete. First we figured it out as an exe file with the size of 284kb. Somehow NOD32 Antivirus software was able to detect it. And I heard there are few other Anti Virus softwares such as AVG and Kaspersky Labs Antivirus Software which detects this virus. So if any one know any further information about htis Virus please make a note.
[518 byte] By [Kumarun] at [2007-11-20 8:35:06]
# 1 Re: Win32/Hakaglan.worm
I don't know how well you can speak Spanish, but I read up on it here (http://www.vsantivirus.com/hakaglan-b.htm). It is an instant messenger virus that came out on March 24th, 2007. It opens your buddy lists and sends messages to each individual in order to replicate itself.

Cuando ello ocurre, se crean en el sistema los siguientes archivos:
c:\windows\system32\rvhost.exe

x:\luan van tot nghiep_ngoc\luan van tot nghiep_ngoc.exe
x:\phuong tram\phuong tram.exe
x:\ppt\power point\power point.exe
x:\ppt\ppt.exe
x:\the vos files\the vos files.exe
x:\new folder.exe

Donde "X" es una unidad de disquete, CD, o cualquier unidad mapeada en red. Para engaar al usuario, el archivo "new folder" muestra el icono de una carpeta.
Translation: When this happens, the following files are created on the system.

Where the "X" is a disk, CD, or whatever item mapped to a network. In order to deceive the user, the archive "new folder" shows the icon of a folder.
PeejAvery at 2007-11-10 3:40:05 >
# 2 Re: Win32/Hakaglan.worm
Why wasn't this moved? Can't rate it!
dglienna at 2007-11-10 3:40:57 >
# 3 Re: Win32/Hakaglan.worm
I reported it this morning. But it still hasn't been moved. And thanks for the thoughts of rating.
PeejAvery at 2007-11-10 3:42:06 >
# 4 Re: Win32/Hakaglan.worm
You guys dont have to so mean. I wrote what I heard. I just wanted to find out more about it. Anyways thanks for your information.
Kumarun at 2007-11-10 3:43:05 >
# 5 Re: Win32/Hakaglan.worm
Nobody is being mean. We were just chit-chatting as it were, thinking that the thread doesn't belong in CC in the first place. Was the info helpful?
dglienna at 2007-11-10 3:44:04 >
# 6 Re: Win32/Hakaglan.worm
Yeah it was. Thanks. I'll find a better CC next time. Cheers
Kumarun at 2007-11-10 3:45:03 >
# 7 Re: Win32/Hakaglan.worm
It would have gotten seen in http://www.dev-archive.com/forum/forumdisplay.php?f=31
dglienna at 2007-11-10 3:46:08 >
# 8 Re: Win32/Hakaglan.worm
[ Redirected Thread ]
Ejaz at 2007-11-10 3:47:11 >
# 9 Re: Win32/Hakaglan.worm
Also, you mentioned Grisoft AVG Antivirus. I highly recommend it. Not only is it freeware, but it doesn't take a lot of resources and is constantly updated. Whenever I work on a PC, that is what I recommend above Norton/Symantec.

You guys dont have to so mean.
I don't know what gave you that impression. We were just trying to be helpful. You see, we move a thread to keep it in the forum where it belongs so that it receives proper attention and the best quality of answer.
PeejAvery at 2007-11-10 3:48:08 >