Home Malware Programs Worms Loxbot.d

Loxbot.d

Posted: March 28, 2006

Loxbot.d is a dangerous Internet worm, which uses AOL Instant Messenger to spread through messages containing malicious links that silently download and install the spyware.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 lockbar.exe
    2 msdirectx.sys
    3 xz.bat

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunfreexstyleHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunServicesfreexstyleHKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunfreexstyleHKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileEnableFirewall=0
Loading...