Home Malware Programs Worms Katomik

Katomik

Posted: March 28, 2006

Katomik is a worm, which spreads through unprotected network shares.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 atomic-x27.exe
    2 atomicpartc.exe
    3 mastoer32.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableRegistryTools=1HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystemDisableTaskMgr=1HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunatomic-x27HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunatomic-x27c

Related Posts

Loading...