Home Malware Programs Backdoors Novacal

Novacal

Posted: March 28, 2006

Novacal is a backdoor that gives the attacker unauthorized remote access to a compromised PC.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 svchost.scr

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunAdministrator=%Windir%Fontssvchost.scrHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOnceAdministrator=%Windir%Fontssvchost.scr/RunOnceHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOnceExAdministrator=%Windir%Fontssvchost.scr
Loading...