Home Malware Programs Trojans Mipbot

Mipbot

Posted: March 28, 2006

Mipbot is a trojan designed to send out large amount of spam e-mail messages from a compromised PC. The spyware regularly contacts predetermined web servers in order to receive further instructions and updated configuration settings. Mipbot does not carry any destructive payload. However, its activity can severely degrade Internet connection throughput and affect overall computer performance and stability. Mipbot automatically runs on every Windows startup.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 i386p.sys

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsNTCurrentVersionWinlogonNotify[filename]

Related Posts

Loading...