W32.HLLW.Fankr - Setup.EXE

tasklist.org		A comprehensive list of processes running in your computer
		tasklist \| attachlist

bookmark this website!		total tasks: 16297

AttachList is a list of email attachment files that viruses usually send in email. It contains the attached file names, typical subjects and messages, the name of the viruses that send them, and instruction on how to remove these viruses.

most requested

Browse attachlist by file name:

| a | b | c | d | e | f | g | h | i | j | k | l | m | n | o | p | q | r | s | t | u | v | w | x | y | z |

Name: W32.HLLW.Fankr

Sender:

Varies.

Subject:

[Ahnlab]Warning:Win32/Opasoft.Worm.17408.J
[Hauri]Warning:Trojan.Win32.Opaserv.H
[KasperskyLabs][Released]Virus Scaning Tool(FREE)
[KISA-CERT/CC][Technical Document]How to analysis hacking Windows
NT/2000
[McAfee]Warning:W32.Cunario.Worm.G
[Microsoft]KB:Q328374How to dectect the mIRC Trojan
[Symantec]Waring:W32.Yaha.Worm.G
[TrendMicro]WariningTroj.Amand.J

Message:

Hello: & This days, Much malicious code is spreaded through Internet,
e-mail, P2P programs, ETC. & This file is useful virus fix tool. &
Please save it to disk and excute this file.

Attachment:

antiopaserv.exe
FileRecorvery.exe
Install.exe
Setup.EXE
TrojanRemover.exe
VirusFixtool.exe

Comments: A mass-mailing worm that attempts to email itself to all the contacts in the WindowsAddress Book.

Symptoms:


 Copies itself to the C:WindowsSystem folder as: Explorer.exe and
Setup.exe 
 Displays the fake message: "Can't open this file: Please! Try
downloading this file again. You have to connect to the
www.symanteca.com if you discovered the problem in the file." 
 Inserts the batch file, C:WindowsSystemUpdate.bat, and the registry
file, C:KOREA.reg.

Recommended Cleanup Software: We found that Easy SpyRemover is the most effective tool for removing this file.

Manual Removal Instructions: Disable System Restore (Windows Me/XP).
Update the virus definitions, and then restart the computer.
Run a full system scan and delete all the files detected as W32.HLLW.Fankr@mm.
Delete the files: C:\WINDOWS\SYSTEM\Update.bat and C:\KOREA.reg.