Home Malware Programs Browser Hijackers PSN

PSN

Posted: March 28, 2006

PSN is a typical browser hijacker that changes Internet Explorer default home and search pages and modifies web browser security settings. The spyware must be manually installed. It automatically runs on every Windows startup and can update itself.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msupdate.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainSearchBar=[siteaddress]HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerMainSearchPage=[siteaddress]HKEY_CURRENT_USERSoftwareMicrosoftInternetExplorerSearchURLSearchURL=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerSearchCustomizeSearch=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternetExplorerSearchSearchAssistant=[siteaddress]HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternetSettingsSafeSitesauto.search.msn.comHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternetSettingsSafeSitesauto.search.psn.cnHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternetSettingsSafeSitesie.search.psn.cnHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternetSettingsSafeSitessearch.msn.comHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInternetSettingsSafeSitessearch.psn.cnHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunUpdates=%System%msupdate.exe

Related Posts

Loading...