Mailbot is a trojan that sends out large amount of spam e-mail messages from a compromised computer. It harvests e-mail addresses from local web pages, text and spreadsheet documents, mail clients configuration files. Mailbot also regularly contacts predetermined web sites in order to transfer operation statistcs and receive additional instructions. The trojan is able to bypass certain firewalls and hide its presence in the system by injecting malicious code into legitimate running processes (usually into the winlogon.exe task). Mailbot automatically runs on every Windows startup.
Some new versions of Mailbot are able to control the compromised computer remotely to send emails.
Related files: msctl32.dll
• Connects itself to the internet
• Hides from the user
• Stays resident in background
Automatic Mailbot removal:
It might be that we are affiliated with any of our recommended products. Full disclosure can be found in
our Agreement of Use.
We are testing STOPzilla's efficiency at removing Mailbot
We are testing SpyHunter's efficiency at removing Mailbot
Malwarebytes Anti Malware
We are testing Malwarebytes Anti Malware's efficiency at removing Mailbot
We are testing XoftSpySE Anti Spyware's efficiency at removing Mailbot
Virus Removal Phone Support
Mailbot manual removal
Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows NT\CurrentVersion\Winlogon\Notify\msctl32.dll
The msctl32.dll file can be found in default system directory, which is one of the following: C:\Windows\System, C:\Windows\System32, C:\Winnt\System32.
Geolocation of Mailbot
This map reveals the prevalence
of Mailbot. Countries and regions that have been affected the most
are: United States.
QR code for Mailbot removal instructions
QR is short for Quick Response. They can be read quickly by the mobile phones. QR codes can store more data than
standard barcodes, including url links, geo coordinates, and text.
The reason we add QR code to the
website is that parasites like Mailbot are really hard to remove on infected computer.
you can quicly scan the QR code with your mobile device and have manual removal instructions to
uninstall Mailbot right in your pocket.
Simply use the QR scanner and read removal instructions from mobile device.
Information added: 2005-12-10 06:18
Information updated: 2007-04-18 09:46
Attention: If you know know a reputable website reated to security threats, please add a link here: add url