Home Malware Programs Worms Accid

Accid

Posted: March 28, 2006

Accid is an Internet worm that spreads via MSN Messenger through instant messages and online chat conversations. The spyware is installed by following malicious links that messages sent from already infected hosts contain.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msmsgr.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunMSNMessengerUserControlsHKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunServicesMSNMessengerUserControlsHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMSNMessengerUserControlsHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesMSNMessengerUserControlsHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionTempData=msmsgr.exe

Related Posts

Loading...