Home Malware Programs Trojans Abwiz.c

Abwiz.c

Posted: March 28, 2006

Abwiz.c is a trojan that collects computer information and sends it to a predefined web server. It also downloads and runs third-party applications and malicious files. Abwiz.c has the ability to update itself via the Internet.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 symcsvc.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunServiceswupd=%System%symcsvc.exeHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunwupd=%System%symcsvc.exe
Loading...