Home Malware Programs Browser Hijackers 7000n

7000n

Posted: March 28, 2006

It is a relatively harmless browser hijacker that changes the default Internet Explorer start page to www.7000n.com site. The spyware doesn't allow to restore standard settings. It has no dangerous payload.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 twain_16.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTTwain_16.iebhoHKEY_CLASSES_ROOTTwain_16.iebho.1
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}F05FC250-632C-424C-83D8-64640B6BED216F9D44B8-E418-49C1-885C-1015DDDBFFC4AE21A223-C4CA-43D7-9764-4FC6DF529F4D
Loading...