Home Malware Programs Adware WinBo

WinBo

Posted: March 28, 2006

WinBo is a typical adware spyware that downloads and shows undesirable commercial advertisements. It can secretly get into the computer while visiting some malicious web sites.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 mbop[X].exe
    2 ms[X].exe
    3 ssee.exe
    4 sys[X].exe
    5 syscheckbop32.exe
    6 win32[X].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOnceEnBrowserHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunSystemCheckHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsys[X]HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunwin32[X]HKEY_LOCAL_MACHINESOFTWARESystemsysold
Loading...