Home Malware Programs Trojans Natspammer

Natspammer

Posted: March 28, 2006

Natspammer is a trojan used by attackers and spammers to send out large amount of unsolicited e-mail messages. The letter's characteristics and mail server details are obtained from a predetermined web server. Netspammer doesn't carry any destructive payload. The trojan automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msvchost.exe
    2 seting.ini

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRuninternatservice
Loading...