Home Malware Programs Worms Gramos

Gramos

Posted: March 28, 2006

Gramos is an Internet worm that infects random remote PCs with blank user account passwords. The spyware secretly downloads from the Internet and installs a dangerous backdoor. Gramos automatically runs on every Windows startup. It is able to hide its running processes.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msgran.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmessengerstart-up=msgran.exe
Loading...