New malware poses as WGA validation and notification


A new piece of very nasty malware has been recently discovered on spyware help forums, first here and again here. The file name is wgavn.exe and it creates a service named "Windows Genuine Advantage Validation Notification", as seen in this line in the HijackThis log.

O23 - Service: Windows Genuine Advantage Validation Notification (wgavn) - Unknown owner - C:\WINDOWS\system32\wgavn.exe New malware poses as WGA validation and notification | Spyware Confidential | ZDNet.com

Linked by shanmuga Friday, 30th June 2006 1:41AM