W32/Hupigo-N

Category: Viruses and Spyware
Type: Win32 worm
Prevalence: No Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Hupigo-N is a worm for the Windows platform.

When run W32/Hupigo-N copies itself to:
<Root>\svrhost.exe
<Program Files>\Common Files\Microsoft Shared\MSInfo\svrhost.exe
<System>\_svrhost.exe

W32/Hupigo-N also spreads via removable shared drives by creating the file <Root>\Autorun.inf (also detected as W32/Hupigo-N) on the shared drive. This file is designed to run the worm when the shared drive is connected to an uninfected computer.

When run W32/Hupigo-N creates a service with a description of "Windows WorkGroup", a display name of "Windows WorkGroup" and a startup type of automatic. Registry entries are created under:

HKLM\SYSTEM\CurrentControlSet\Services\svrhost\

download Try Sophos products for free
Download now