Hidrag

Here is a short description of Hidrag:
Hidrag is a memory resident Win32 virus. It creates a dropper for itself in Windows directory and sets a startup key for that file in the Registy. Being active the virus looks for EXE files on all available drives and infects them.

This virus/malware was added to our database at: 12/13/05

Anti-virus program

This malware was discovered and named by F-Secure.
For removal tools and/or anti-virus programs for Hidrag then anti-virus programs and tools from F-Secure can remove the virus/malware.


For more information about antivirus programs you can read here:Antivirus programs


More information about Hidrag
Hidrag is a non-dangerous memory resident parasitic Win32 virus. The virus infects Win32 PE EXE files. While infecting the virus encrypts a block of victim files. When the Hidrag virus runs it creates a copy of itself that is about 36K in size and places it in the Windows directory using the name svchost.exe. Next Hidrag registers this file in the system registry auto-run key: HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\RunServices PowerManager = %WindowsDir%\\SVCHOST.EXE Hidrag then stays in Windows memory as an active process, searches for EXE files on all drives - starting with the C: drive - and infects them. The virus does not manifest itself in any way. The virus contains the following encrypted text strings: Hidden Dragon virus. Born in a tropical swamp. PowerManagerMutant .
This was added 04/05/07 09:51:02

More information about Hidrag
It also disables the \"show hidden files\" options.
This was added 03/04/08 18:27:36

More information about Hidrag
it also hides the setup files while running them. and it drops internet pages it opened more than 2 or 3..
This was added 05/16/08 09:39:55

More information from F-Secure


If you feel like there is information missing or if you want to add information then send us that information by filling in information below.



Write removal instructions for Hidrag