Home Malware Programs Worms W32.HLLW.Gaobot.AA

W32.HLLW.Gaobot.AA

Posted: March 28, 2006

W32.HLLW.Gaobot.AA is a worm that attempts to spread to the network shares with weak passwords.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}Browsetothekey:DeletethevalueConfigLoader=svchosl.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunRunServices
Loading...