Home Malware Programs Rootkits Phase Bot

Phase Bot

Posted: January 13, 2015

Threat Metric

Threat Level: 8/10
Infected PCs: 5
First Seen: January 13, 2015
Last Seen: November 7, 2021
OS(es) Affected: Windows

Phase Bot is a rootkit that can be installed on a computer system without its own process and without leaving any files into the disk. Phase Bot targets Windows systems and can infect computers running Windows XP and subsequent versions. Phase Bot's relocatable code is concealed in the Registry and in order to execute it into memory, Phase Bot uses PowerShell (a standard feature installed in various Windows versions). If Phase Bot is targeting a computer that runs an older version of Windows that doesn't have PowerShell installed, Phase Bot has alternative installation methods. Phase Bot is able to bypass anti-malware programs with rootkit detection capability by using a new method which makes Phase Bot a highly stealth loader. Third parties can easily buy Phase Bot from its website and the asking price is 0.8 Bitcoin.

Use SpyHunter to Detect and Remove PC Threats

If you are concerned that malware or PC threats similar to Phase Bot may have infected your computer, we recommend you start an in-depth system scan with SpyHunter. SpyHunter is an advanced malware protection and remediation application that offers subscribers a comprehensive method for protecting PCs from malware, in addition to providing one-on-one technical support service.

Download SpyHunter's Malware Scanner*

* See Free Trial offer below. EULA and Privacy/Cookie Policy.

Why can't I open any program including SpyHunter? You may have a malware file running in memory that kills any programs that you try to launch on your PC. Tip: Download SpyHunter from a clean computer, copy it to a USB thumb drive, DVD or CD, then install it on the infected PC and run SpyHunter's malware scanner.