Home Malware Programs Trojans Idocha

Idocha

Posted: March 28, 2006

Idocha trojan searches the computer for e-mail addresses, records them and sends to its author by e-mail. The spyware changes the default Internet Explorer start page to Japanese pornographic site, downloads and open a video file with adult content. Idocha may register the user to a porn service without notification.

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainStartPage=[linktoapornsite]
Loading...