Home Malware Programs Dialers Saristar

Saristar

Posted: March 28, 2006

Saristar is a dialer that connects an affected PC to the Internet via a high-cost telephone number. This spyware accesses adult resources without asking for user permission. Saristar can secretly get into the computer from some unsafe web sites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 saristar.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CLASSES_ROOTAppIDSaristar.DLLHKEY_CLASSES_ROOTSaristar.SaristarHKEY_CLASSES_ROOTSaristar.Saristar.1HKEY_LOCAL_MACHINESOFTWARESaristar
  • The following CLSID's were detected:
    HKEY..\..\{CLSID Path}C68AE9C0-0909-4DDC-B661-C1AFB9F5AE5090A52F00-64AC-4DC6-9D7D-4516670275D0
Loading...