Home Malware Programs Worms Hawawi

Hawawi

Posted: March 28, 2006

Hawawi is a dangerous Internet worm that spreads by e-mail, through file sharing networks and using several instant messengers.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 explore.exe
    2 hawa.pif
    3 hawawi.pif
    4 media player.exe
    5 smtp.ocx
    6 smtpmailer.dll
    7 sys32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunexploreHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunioadqm

Related Posts

Loading...