Pushbot worms come from a malware family that spreads using MSN Messenger. Pushbot variants also contain an IRC-based backdoor via which they receive instructions to download and execute corrupt files, send messages to MSN Messenger contacts, and retrieve information from protected storage. Pushbot worms pose a significant threat to PC security and should be removed as soon as they are detected.
Inject.DBT [AVG]a variant of MSIL/Injector.ARX [ESET-NOD32]Trojan.MSIL.Crypt.wjv [VBA32]TR/Agent.196608.4 [AntiVir]BackDoor.Comet.152 [DrWeb]Trojan.Win32.Comet.bazjnq [NANO-Antivirus]Win32.Trojan [eSafe]TROJ_SPNR.17KF12 [TrendMicro-HouseCall]Trojan/Generic.arx [TheHacker]Trojan.MSIL [Malwarebytes]
More aliases (816)
Pushbot Automatic Detection Tool (Recommended)
Is your PC infected with Pushbot? To safely & quickly detect Pushbot, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect Pushbot What happens if Pushbot does not let you open SpyHunter or blocks the Internet?
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 %WINDIR%\ csdrive32.exe 311 2 %WINDIR%\ ghdrive32.exe 98 3 %WINDIR%\ aadrive32.exe 82 4 %PUBLIC%\ algs.exe 70 5 %WINDIR%\ ywdrive32.exe 37 6 %WINDIR%\ safari.exe 37 7 %PUBLIC%\ nvsvc32.exe 28 8 %WINDIR%\ jodrive32.exe 28 9 %WINDIR%\ sysstem.exe 21 10 %WINDIR%\ system32\ tasksvc.exe 21
Posted: October 19, 2010 | By SpywareRemove
Threat Level: 9/10
Rate this article:
Detection Count: 621