Home Malware Programs Trojans Mancsyn

Mancsyn

Posted: March 28, 2006

Mancsyn is a trojan that contacts predefined remote servers in attempt to secretly download and run arbitrary potentially harmful files. Mancsyn may also collect information about the compromised PC. The trojan runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 adobe32.exe
    2 himem32.exe
    3 mmapi32.dll
    4 wucfg.dat

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunmemorymanager
Loading...