Home Malware Programs Trojans Pisaboy

Pisaboy

Posted: March 28, 2006

Pisaboy is a trojan targeted at users of MSN Messenger. It is designed to provide the remote attacker with unauthorized control over certain functions of MSN Messenger installed to the compromised computer. The trojan allows the attacker to send instant messages and see all the messages the user sends or receives. Pisaboy can also restart a PC, access specified web sites and show certain computer messages. Moreover, it can block access to popular Internet resources and install some adware spywares without user knowledge and consent. Pisaboy automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 abz.exe
    2 sys.exe
    3 systray.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMSN+HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsystem
Loading...