Know Your Malware: Mesoto Removal

Mesoto is a trojan designed to steal login names, passwords and user details related to MSN Messenger accounts. Once executed, the parasite displays a fake MSN screen in order to trick the user into entering his or her MSN password and login name. Mesoto sends gathered data to the predefined e-mail address. The trojan may contact a predefined remote host in order to download additional instructions. Mesoto automatically runs on every Windows startup.

Related files: msnmsnr.exe

Mesoto properties:
Sends out logs by FTP or email
Connects itself to the internet
Stays resident in background Remove Mesoto, removal instructions

Linked by shanmuga Wednesday, 28th December 2005 3:54AM