Home Malware Programs Trojans Comcast

Comcast

Posted: March 28, 2006

Comcast, also known as Comhush, is a trojan, which attempts to steal CD keys of certain online PC games. It transfers gathered data to a predetermined web server. The spyware can also disable some essential computer components. Comcast runs as a service on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 smss.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftOleEnableDCOM=nHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesDontDisplayLastUserName=1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonSpecialAccountsUserListSUPPORT_x86=0HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsaRestrictAnonymous=1HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesapman

Related Posts

Loading...