| Name: | ASpam |
| Aliases: | W32/ASpam, TROJ_ASPAM.A, Anti Spam, Aspam.Trojan,W32.ASpam.Trojan, PE trojan, |
| Ports: | |
| Files: | Aspam.exe - 173,568 bytes Amcis32.dll - Amcis32.ieclass - |
| Created: | Mar 2000 |
| Requires: | |
| Actions: | Remote Access |
| Disguised as an Microsoft Anti-Spam tool, that comes attached to a spoofed mail from what looks as Microsoft. In order to install, it drops Amcis32.dll into the system folder and attaches to Explorer.exe. The binary file then creates Aspam.exe, which then installs itself. | |
| Versions: | |
| Registers: | HKEY_LOCAL_MACHINE\Software\Classes\CLSID\HKEY_LOCAL_MACHINE\Software\Classes\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\ |
| Notes: | Works on Windows, together with MS Internet Explorer. |
| Country: | |
| Program: |