Home Malware Programs Browser Hijackers Eziin

Eziin

Posted: March 28, 2006

Eziin is a browser hijacker that changes the Internet Explorer default home page to the eziin.com site. It may modify some web browser security settings. Eziin must be manually installed. It automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 clienttimer.exe
    2 ezionup.exe
    3 popclient.exe
    4 system_ct.exe
    5 system_pp.exe
    6 system_tp.exe
    7 system_wc.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerSecurityRecever_Security=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunhwp=%System%system_wc.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwin32ds=%System%system_wc.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwin32io=%System%clienttimer.exeHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwin32wn=%System%clienttimer.exe
Loading...