Home Malware Programs Browser Hijackers Funsta

Funsta

Posted: March 28, 2006

Funsta is a browser hijacker, which changes the Internet Explorer default home page and modifies some related settings. The spyware also blocks access to numerous web sites and sends the web browser to undesirable Internet resources. Funsta automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 sass.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainDefault_Page_URL=[siteaddress]HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainDefault_Page_URL=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerMainStartPage=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunusb=%System%sass.exe
Loading...