W32/Anker.X is a worm that will infect Windows systems.
Upon execution, the worm drops wkssvc.exe in the Windows folder.
The worm modifies registry at the following location to load itself during each startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Console
The worm also modifies the hosts file.
More information can be found at this Proland Software page.
Loading Comments...