Some new versions of Mailbot are able to control the compromised computer remotely to send emails. Related files: msctl32.dll
• Connects itself to the internet
• Hides from the user
• Stays resident in background
Mailbot manual removal
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll
The msctl32.dll file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Geolocation of Mailbot
Comments on Mailbot
Post a comment
Attention: Use this form only if you have additional information about a parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.