Virus.Win32.HLLW.Sakao, Win32.HLLW.Sakao, W32/Sakao, W32.Sakao, Win32.HLLW.Sadako.24576
W32/Sakao-A, Win32/HLLW.Sakao.A, WORM_SAKAO.A, Win32:Sakao, Win32/Sakao.A
Category: Computer Virus
Active & Spreading
Asia, North and South America, and some parts of Europe and Australia
17 Oct 2003
W32/Sakao is a simple virus, which attempts to propagate via floppy disks. This virus affects Windows Operating System platforms such as Windows 2000, Windows 98, Windows 95, Windows Me, Windows Server 2003, Windows NT, and Windows XP.
W32.Sakao Removal Tool
If you have Malware on your computer it will cause annoyances and will damage your system. You should either:
A. Manually remove the infected files from your computer, or
B. Automatically scan your system using trusted software
We recommend that you scan your system for malware. Our partner has a computer virus removal tool to automatically clean W32.Sakao from your computer.
More details about W32.Sakao
W32.Sakao is written in MSVisual Basic programming language. The VB run time libraries are required for W32/Sakao to be executed. Due to a bug in its code, the filename and location of its virus should either be C:\WINDOWS\File.exe, a:\Myfile.exe, \Myfile, C:\WINDOWS\Start Menu\Programs\Startup\FindFast.exe, a:\Sadako.exe or \Sadako.exe. Once the system is executed with the virus W32.Sakao, it creates a copy of itself. If the filename and location is C:\WINDOWS\File.exe, it copies itself as a:\Myfile.exe, if it is a:\Myfile.exe, it copies itself as C:\WINDOWS\File.exe, if it is C:\WINDOWS\Start Menu\Programs\Startup\FindFast.exe, it copies itself as a:\Sadako.exe, if it is a:\Sadako.exe it copies itself as: C:\WINDOWS\Start Menu\Programs\Startup\FindFast.exe, if it is \Sadako.exe, it copies itself as C:\WINDOWS\Start Menu\Programs\Startup\FindFast.exe and a:\Sadako.exe. When the process is completed it may attempt to shut down the computer.
The W32.Sakao application receives instructions from the server. It can modify the system settings to disable security options. Installed anti-malware programs may suddenly malfunction due to blocked processes or deleted components. Files in the system may be deleted, moved or edited. Attached devices can be disconnected or turned on without the user’s consent. The W32.Sakao program may also download unwanted files to the system. These are typically installers for other malicious software. These can include adware, spyware, browser hijackers and other Trojan applications.