Home Malware Programs Worms Botter

Botter

Posted: March 28, 2006

Botter is a dangerous rapidly spreading Internet worm that propagates by e-mail and through IRC online chat network. The spyware arrives in RAR archives containing malicious files.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 local.exe
    2 tasksys.exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunWindowsTaskService(32-bits)HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessStart=4
Loading...