Home Malware Programs Trojans Hasum

Hasum

Posted: March 28, 2006

Hasum is a trojan designed to download from the Internet and run arbitrary files. It also can open predetermined web sites and secretly track user activity. The spyware may transfer gathered data to predefined remote hosts. Hasum automatically runs on every Windows startup.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonNotifyst3HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonNotifyst3i
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}B212D577-05B7-4963-911E-4A8588160DFA1B68470C-2DEF-493B-8A4A-8E2D81BE4EA5
Loading...