Home Malware Programs Worms Incef

Incef

Posted: March 28, 2006

Incef is an Internet worm designed only to spread. It doesn't have any dangerous payload. Incef spreads through file-sharing networks and via IRC channels using mIRC chat application. It creates multiple infected files, which names may vary and distributes them. The spyware alters essential mIRC settiengs. Incef runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 comand.scr
    2 command.pif
    3 commando.exe
    4 mysister_fucking.exe
    5 srvwin.scr
    6 winexec.exe
    7 winsys.exe
    8 winupdate.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareKazaaLocalContentDisableSharing=0HKEY_CURRENT_USERSoftwareKazaaLocalContentdir[X]=012345:[xfolder]HKEY_CURRENT_USERSoftwareKazaaResultsFilterfirewall_filter=0HKEY_CURRENT_USERSoftwareKazaaResultsFiltervirus_filter=0HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwinexec=%Windir%winexec.exe
Loading...