Home Malware Programs Worms Buchon

Buchon

Posted: March 28, 2006

Buchon is an Internet worm, which spreads by e-mail through messages with infected executable attachments.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 csrss.bin
    2 csrss.exe
    3 messagetxt[X]mcafee.com

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunkeylogger
Loading...