Mailbot is a trojan that sends out large amount of spam e-mail messages from a compromised computer. It harvests e-mail addresses from local web pages, text and spreadsheet documents, mail clients configuration files. Mailbot also regularly contacts predetermined web sites in order to transfer operation statistcs and receive additional instructions. The trojan is able to bypass certain firewalls and hide its presence in the system by injecting malicious code into legitimate running processes (usually into the winlogon.exe task). Mailbot automatically runs on every Windows startup.
Some new versions of Mailbot are able to control the compromised computer remotely to send emails.
Related files: msctl32.dll
• Connects itself to the internet
• Hides from the user
• Stays resident in background
It might be that we are affiliated with any of our recommended products. Full disclosure can be found in
our Agreement of Use.