Tuesday, January 20, 2009

Mechbot Backdoor

Removing Mechbot
Categories: Backdoor
Backdoors combine the functionality of most other types of in one package.
Backdoors have one especially dangerous sub-class: variants that can propagate like worms.


Mechbot Also known as:

[Kaspersky]Backdoor.Win32.Mechbot,Backdoor.Win32.Mechbot.a;
[McAfee]W32/IRCbot.gen.f;
[Other]W32.IRCBot,Backdoor.Win32.Mechbot.d,BKDR_MECHBOT.D,Win32/Chembot.A,Backdoor.Trojan

How to detect Mechbot:

Folders:
[%SYSTEM%]\dllcache\audio

Registry Keys:
HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\legacy_mrtserv
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mrtserv

Removing Mechbot:

You can download trial version of "Exterminate-It" antivirus software here, to check your computer instantly.

Or buy it to remove ALL viruses from your computer.

Also Be Aware of the Following Threats:
Small.awa Downloader Removal instruction

No comments: