Pisaboy is a trojan targeted at users of MSN Messenger. It is designed to provide the remote attacker with unauthorized control over certain functions of MSN Messenger installed to the compromised system. The trojan allows the attacker to send instant messages and see all the messages the user sends or receives. Pisaboy can also restart a computer, access specified web sites and display certain system messages. Moreover, it can block access to popular Internet resources and install some adware parasites without user knowledge and consent. Pisaboy automatically runs on every Windows startup.
abz.exe, sys.exe, systray.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunsystemHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMSN+