Overview: W32.Pahatia.A is a worm that can spread by copying itself into local folders and mapped network drives, and attempts to restart the compromised computer if certain processes are running.

Category: Worm

Risk Level: Low

Related Files and Process:

  • C:\Documents and Settings\All Users\Desktop\My Documents.exe
  • C:\Documents and Settings\All Users\Start Menu\Programs\My Documents.exe
  • C:\Program Files\Microsoft Office\Temp.exe
  • C:\WINDOWS\security\krnl32.bat
  • C:\WINDOWS\system\Aku Bisa Tanpamu.exe
  • C:\WINDOWS\system\Aku Kecewa.exe
  • C:\WINDOWS\system\Dibalas Dengan Dusta.exe
  • C:\WINDOWS\system\ISASS.exe
  • C:\WINDOWS\system\Kau Pikir Kaulah Segalanya.exe
  • C:\WINDOWS\system\LNETINFO.exe
  • C:\WINDOWS\system\mr.abram’s.exe
  • C:\WINDOWS\system\Sejauh Mungkin.exe
  • C:\WINDOWS\system\Tak Seperti Dulu.exe
  • C:\WINDOWS\system\Viva Elektro.exe
  • C:\WINDOWS\system32\Patah_0[RANDOM].exe
  • C:\WINDOWS\hkcmd.exe
  • C:\WINDOWS\system.exe

View User’s Removal Procedure Below

View Complete Information and Removal : Click Here

Source: Symantec

 

 

Â