<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://msmvps.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Watch out! It seems there is malware that fakes Windows Genuine Advantage Notification and Validation Tool</title><link>http://msmvps.com/blogs/donna/archive/2006/06/28/103081.aspx</link><description>See the topic at AUMHA (thanks to Microsoft MVP Steve Wechsler for the link). The HijackThis log show: O23 - Service: Windows Genuine Advantage Validation Notification (wgavn) - Unknown owner - C:\WINDOWS\system32\wgavn.exe Note that, the legitimate Windows</description><dc:language>en</dc:language><generator>CommunityServer 2008.5 SP2 (Build: 40407.4157)</generator><item><title>Argh! 2nd instance of fake Windows Genuine Advantage Notification</title><link>http://msmvps.com/blogs/donna/archive/2006/06/28/103081.aspx#103243</link><pubDate>Thu, 29 Jun 2006 20:42:42 GMT</pubDate><guid isPermaLink="false">d67277c4-116b-43f1-b688-e9ef184ea916:103243</guid><dc:creator>Donna's SecurityFlash</dc:creator><description>One earlier and now there's 2nd ... it's at Daniweb's forum.&amp;amp;amp;nbsp; The bad file is faking Microsoft's...&lt;img src="http://msmvps.com/aggbug.aspx?PostID=103243" width="1" height="1"&gt;</description></item></channel></rss>