Home Malware Programs Worms Syney

Syney

Posted: March 28, 2006

Syney is a mass-mailing worm that spreads in messages with infected executable attachments using Microsoft Outlook mail application. The spyware is designed to remove standard Windows tools, executables, libraries, fonts, desktop shortcuts, passwords and other critical computer objects located in default OS directories like C:Windows and C:WindowsSystem. It also destroys essential components of installed Symantec Norton AntiVirus application and shares the main hard disk. Syney can set the computer clock to a predefined time, change OS startup and shutdown screens and launch DoS attacks against web sites of reputable software and PC security companies such as Symantec, McAfee and Microsoft. The spyware may create numerous executable files with random names in the root of the main hard disk and main Windows folder. Syney runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 attach.exe
    2 autoexec.bat
    3 backup.exe
    4 batch.bat
    5 dosboot.exe
    6 navkill.bat
    7 norton antivirus 2003.exe
    8 nortonantivirus.exe
    9 time.bat
    10 virus.exe
    11 virusgen.bat
    12 winsys.dll
    13 worm.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicessydney

Related Posts

Loading...