|
Title: Botter
Type: Worms
Remove Botter. Removal instructions
Severity scale:
 (69 / 100)
Once executed, Botter silently installs itself to the system, runs a payload and spreading routine. The worm sends e-mail messages with attached archives containing infected executables to all the contacts in Windows Address Book. It connects to predetermined IRC servers, joins certain channels and sends private messages to other users. These messages contain a link that downloads an infected file from a web server that the worm runs on a compromised computer. Botter can also directly send malicious files to chat users through specific DCC commands. The parasite's payload is comprised of several harmful functions. Botter searches all fixed, removable and remote drives for RAR archives and inserts a randomly named copy of itself in all archives found. It installs a variant of Spybot worm, which gives the attacker unauthorized remote access to a compromised computer, terminates practically all known antiviruses, firewalls and security-related programs and blocks access to popular security-related web sites and services. Botter also disables certain Windows components. The worm automatically runs on every Windows startup. Botter properties: • Connects itself to the internet • Hides from the user • Stays resident in background Automatic Botter removal: 
We are testing STOPzilla's efficiency at removing Botter
(2005-10-21 07:13:10)
We are testing Malwarebytes Anti Malware's efficiency at removing Botter
(2005-10-21 07:13:10)
We are testing Spyware Doctor's efficiency at removing Botter
(2005-10-21 07:13:10)
Botter manual removal:Kill processes:tasksys.exe, local.exe Delete registry values: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Task Service (32-bits) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Start=4 Delete files: tasksys.exe, local.exe Misc: Botter e-mail attachments and distributed files have varying names. Exact file location: local.exe - C: tasksys.exe - C:\Windows\System, C:\Windows\System32 or C:\Winnt\System32 
Information added: 2005-10-21 04:35:55
Information updated: 2005-10-21 04:35:55 Additional resources related to Botter:Attention: If you know or you have a website or page about Botter removal, feel free to add a link to this list: add url |
Latest spyware news:
Subscribe to news
Similar parasites:
Related discussions:
|
FORUM:
HELP:
Spreading the knowledge:
It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your
visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.
Post Comment: