Home Malware Programs Backdoors Akbot

Akbot

Posted: March 28, 2006

Akbot is an IRC-controlled backdoor, which provides the attacker with unauthorized remote access to the compromised PC. The intruder can gain control over the computer and steal user sensitive information. He can also access certain Internet resources and setup a hidden proxy server. Akbot automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 msws2_32.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunMSWinsock

Related Posts

Loading...