Sophos

Troj/Mailbot-AX

Aliases
  • Trojan-Clicker.Win32.Costrat.h
  • Spam-Mailbot.c!Rootkit
  • Backdoor.Rustock.B
Category
Type
What to do
Prevalence low high

Summary

 
Affected operating systems Windows
Characteristics
  • Installs itself in the registry
Included in our products from October 2006 (4.10)
Protection available since 5 September 2006 13:33:24 (GMT)
Detected by All Sophos products

Action

More Information

Troj/Mailbot-AX is a backdoor Trojan for the Windows platform.

Troj/Mailbot-AX gives a remote intruder access to a compromised computer, and allows them to send arbitrary emails.

Troj/Mailbot-AX uses a kernel mode rootkit to stealth itself on an infected computer. The rootkit will be installed to either the Windows system folder as lzx32.sys, or as an alternate data stream for the Windows system folder.

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer