Home Malware Programs Worms Loxbot.c

Loxbot.c

Posted: March 28, 2006

Loxbot.c is an Internet worm, which uses AOL Instant Messenger to spread through messages containing malicious links that silently download and install the spyware.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 lockbr.exe
    2 xz.bat

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunfreexstyleHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunfreexstyleHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileEnableFirewall=0HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunServicesfreexstyle
Loading...