Ixbot
Ixbot is an Internet worm, which spreads through instant messages sent using AIM, AOL Triton or MSN Messenger applications. Such messages contain a certain text and a malicious link pointing to an infected file. Once the user clicks on a link, the worm silently installs itself to the computer and runs a spreading routine. The worm includes an integrated IRC-controlled backdoor, which provides the attacker with unauthorized remote access to a compromised PC. The intruder can download and execute arbitrary files. Ixbot creates a lot of infected files with meaningful names in several shared folders found in the computer. It also terminates some antivirus applications and prevents them from running on computer startup. Ixbot runs every time Windows loads.
Registry Modifications
- The following newly produced Registry Values are:
HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunprocll2
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.