New malware poses as WGA validation and notification
A new piece of very nasty malware has been recently discovered on spyware help forums, first here and again here. The file name is wgavn.exe and it creates a service named "Windows Genuine Advantage Validation Notification", as seen in this line in the HijackThis log.
O23 - Service: Windows Genuine Advantage Validation Notification (wgavn) - Unknown owner - C:\WINDOWS\system32\wgavn.exe » New malware poses as WGA validation and notification | Spyware Confidential | ZDNet.com
Back to: PC Security, privacy news