Pushbot

Pushbot Description

Pushbot worms come from a malware family that spreads using MSN Messenger. Pushbot variants also contain an IRC-based backdoor via which they receive instructions to download and execute corrupt files, send messages to MSN Messenger contacts, and retrieve information from protected storage. Pushbot worms pose a significant threat to PC security and should be removed as soon as they are detected.

Aliases

Inject.DBT [AVG]a variant of MSIL/Injector.ARX [ESET-NOD32]Trojan.MSIL.Crypt.wjv [VBA32]TR/Agent.196608.4 [AntiVir]BackDoor.Comet.152 [DrWeb]Trojan.Win32.Comet.bazjnq [NANO-Antivirus]Win32.Trojan [eSafe]TROJ_SPNR.17KF12 [TrendMicro-HouseCall]Trojan/Generic.arx [TheHacker]Trojan.MSIL [Malwarebytes]

More aliases (816)

Pushbot Automatic Detection Tool (Recommended)

Is your PC infected with Pushbot? To safely & quickly detect Pushbot, we highly recommend you run the malware scanner listed below.

Download SpyHunter's* Malware Scanner to detect Pushbot What happens if Pushbot does not let you open SpyHunter or blocks the Internet?

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:

#	File Name	Detection Count
1	%WINDIR%\ csdrive32.exe	311
2	%WINDIR%\ ghdrive32.exe	98
3	%WINDIR%\ aadrive32.exe	82
4	%PUBLIC%\ algs.exe	70
5	%WINDIR%\ ywdrive32.exe	37
6	%WINDIR%\ safari.exe	37
7	%PUBLIC%\ nvsvc32.exe	28
8	%WINDIR%\ jodrive32.exe	28
9	%WINDIR%\ sysstem.exe	21
10	%WINDIR%\ system32\ tasksvc.exe	21