Title: Mailbot

Type: Trojans

Remove Mailbot. Removal instructions

Severity scale:

(49 / 100)

Mailbot is a trojan that sends out large amount of spam e-mail messages from a compromised computer. It harvests e-mail addresses from local web pages, text and spreadsheet documents, mail clients configuration files. Mailbot also regularly contacts predetermined web sites in order to transfer operation statistcs and receive additional instructions. The trojan is able to bypass certain firewalls and hide its presence in the system by injecting malicious code into legitimate running processes (usually into the winlogon.exe task). Mailbot automatically runs on every Windows startup.
Some new versions of Mailbot are able to control the compromised computer remotely to send emails.

Related files: msctl32.dll

Mailbot properties:
• Connects itself to the internet
• Hides from the user
• Stays resident in background

Automatic Mailbot removal:

remover for Mailbot

SpyHunter is recommended remover to uninstall Mailbot. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove Mailbot using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing Mailbot (2007-04-18 12:23:18)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing Mailbot (2007-04-18 12:23:18)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing Mailbot (2007-04-18 12:23:18)

XoftSpySE Anti Spyware

download | review

Mailbot manual removal:

FORUM:
Discuss Mailbot in
spyware removal forum

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll

HELP:
how to remove registry entries

Delete files:
msctl32.dll

HELP:
how to remove harmful files

Misc:
The msctl32.dll file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.

Information added: 2005-12-10 06:18:17
Information updated: 2007-04-18 09:46:03

Additional resources related to Mailbot:

Attention: If you know or you have a website or page about Mailbot removal, feel free to add a link to this list: add url

more resources

Post Comment:

Attention: Use this form only if you have additional information about Mailbot parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Latest spyware news:

Subscribe to news

Similar parasites:

Compare spyware removers
Compare free products

HijackThis Log Analyzer Beta 2

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.