Remove Mailbot. Description and removal instructions

 
Title: Mailbot

Type: Trojans
Severity scale:Mailbot severity is 49  (49 / 100)
 
Mailbot is a trojan that sends out large amount of spam e-mail messages from a compromised computer. It harvests e-mail addresses from local web pages, text and spreadsheet documents, mail clients configuration files. Mailbot also regularly contacts predetermined web sites in order to transfer operation statistcs and receive additional instructions. The trojan is able to bypass certain firewalls and hide its presence in the system by injecting malicious code into legitimate running processes (usually into the winlogon.exe task). Mailbot automatically runs on every Windows startup.
Some new versions of Mailbot are able to control the compromised computer remotely to send emails.


Related files: msctl32.dll

Mailbot properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Mailbot removal:

remover for Mailbot

Mailbot manual removal:

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll
Delete files:
msctl32.dll
Misc:
The msctl32.dll file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Other programs to remove Mailbot:

• Malwarebytes Anti Malware - Review - Download
• Malwarebytes Anti Malware - Review - Download
• Windows Defender - Review - Download

Information added: 10/12/05
Information updated: 18/04/07

Additional resources related to Mailbot:

Attention: If you know or you have a website or page about Mailbot removal, feel free to add a link to this list: add url




more resources

Post Comment:

Attention: Use this form only if you have additional information about Mailbot parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.



Enter security code:

Latest spyware news:
Similar parasites: