Home Malware Programs Trojans Wowcraft

Wowcraft

Posted: March 28, 2006

Wowcraft is a trojan designed to steal passwords used in popular PC game "World of Warcraft" and send them to its author by e-mail. It also can record user keystrokes, download and install potentially unsafe software. The spyware infects essential computer files and terminates running security applications.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 internat.exe
    2 msdll.dll
    3 rundll32.exe
    4 svchost32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunload=C:ProgramFiles[svchost32.exeorrundll32.exeorinternat.exe]

Related Posts

Loading...