Kassbot

Kassbot Description


Worm Kassbot, also known as Nanspy, spreads in local area networks. It infects PCs running vulnerable Windows version with unpatched security holes. Kassbot modifies essential computer settings to block access to certain web sites. It contacts predefined web servers to receive commands from the attacker and download updates. It also compromises other vulnerable network PCs.
Download SpyHunter Spyware Scanner
Kassbot is relatively easy to remove. It depends on a single executable located in the default computer folder and one registry entry.

Kassbot Automatic Detection Tool (Recommended)


Is your PC infected with Kassbot? To safely & quickly detect Kassbot, we highly recommend you run the malware scanner listed below.



File System Modifications

  • The following files were created in the system:
    # File Name
    1 mmsvc32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMicrosoftNetworkServicesController=%System%mmsvc32.exe
Posted: March 28, 2006 | By
Share:
Follow Me on Pinterest More More
Threat Level: 5/10
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...
Rate this article:

Leave a Reply

What is 12 + 7 ?
Please leave these two fields as-is:
IMPORTANT! To be able to proceed, you need to solve the following simple math (so we know that you are a human) :-)