Home Malware Programs Dialers Greencard

Greencard

Posted: March 28, 2006

Greencard is a dialer that connects an affected PC to the Internet through premium rate phone number using a modem. The threat also changes the Internet Explorer default home page. Greencard automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 link1
    2 link2.exe
    3 link3.exe
    4 link4.exe
    5 rasphone.pbk
    6 visa.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftCurrentVersionRunwindows=C:ProgramFilesvisa.exe
Loading...