SoftwareTipsandTricks.com
Home Forums Windows 7 Security Tips
Forums

Windows 7
Windows Vista
Windows XP

Security Tips
Troubleshooting
Keyboard Shortcuts
Encyclopedia


Drivers

Internet Terms
Computer Terms

File Extensions (75)
File Extensions (15K+)

Startup Applications
Necessary Files
Useless Files
At Your Option Files
Dangerous Files
Browser Objects

DLL Files
SYS Files
INF Files
OCX Files
VXD Files

Virus Database
Virus Warnings

Easter Eggs
Tips and Tricks
Articles
Hot Downloads


Privacy Policy
Contact Us







  hkey.exe

Name hkey.exe

Description

W32.Gaobot.AFW is a worm that spreads through open network shares and several Windows vulnerabilities.
The worm also spreads through backdoors that the Beagle and Mydoom worms and the Optix family of backdoors install.
W32.Gaobot.AFW can act as a backdoor server program and attack other systems.
It attempts to kill the processes of many antivirus and security programs.
Attempts to steal the product ID for Windows, and the CD keys of some computer games.

Copies itself to %System%\hkey.exe.
Opens a randomly selected TCP port and sends a copy of itself to any process connecting to that port.
Connects to a remote IRC server and awaits commands from the remote attacker.
Attempts to copy itself to other computers through the following remote administrative SMB shares, using weak user names and passwords.
Copies itself and executes on any remote shares to which it successfully authenticates.
Schedules a Network job to run the worm on the remote system.

Manual removal:
Navigate to the keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
and delete the value: "windows"="hkey.exe"


Still have a problem? Ask for help at our discussion forum.



Search Dangerous Files :
 

: : Recent posts at Forums : :

Grown up placement

Mature placement

Project recto moved

Pictures from collective networks

Experimental Protrude

Experimental Project

Full-grown galleries

My unruffled engagement

My creative web outline

My new website

Vak, Ressel, Anog and Stan Niger

Berek, Ivan, Kelvin and Grobock Syrian arab republic

Pyran, Seruk, Sugut and Finley Kuwait

Pictures from collective networks

Unshackle galleries

Zarkos, Sibur-Narad, Ur-Gosh and Julio Virgin islands, british

Spike, Kalan, Oelk and Tufail Chad

Jerek, Moff, Angir and Osko Togo

Gunnar, Irmak, Delazar and Cyrus Panama

Pictures from community networks

Mortis, Brontobb, Tukash and Ben Ukraine

Hardcore Gay photo blogging post

Pictures from collective networks

Adult galleries

Free galleries

Delivered adult galleries

Stared different contract

Gay blogging service, Daily photos

My cool protrude

My new website




SoftwareTipsandTricks, All Rights Reserved.