Know Your Malware: Mocbot Removal

Mocbot is a quite dangerous Internet worm that spreads by exploiting vulnerable computers running Microsoft Windows operating system with unpatched security flaws. The parasite is designed to open a back door and give the attacker unauthorized remote access to a compromised system. The intruder can download and run arbitrary files, launch Denial of service attacks against specified hosts and perform other malicious actions. Mocbot disables some essential Windows components. The parasite automatically runs as a service on every system startup.

Related files: wudpcom.exe

Mocbot properties:
Allows remote user connection
Connects itself to the internet
Hides from the user
Stays resident in background Remove Mocbot, removal instructions

Linked by shanmuga Wednesday, 26th October 2005 7:47AM