Win32.Mytobor

Troublesome Win32.Mytobor will come sneaking into your system and will then promptly drop a copy of itself in the following registry keys.

HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnum
RootLEGACY_WINDOWS_PROCESS_SEVICES

It will do this to ensure that it is able to run on each Windows startup.  It will then make its way to a random port where it waits and listens for commands from its author.  Following that, it will connect to a server through IRC or Internet Relay Chat.  Win32.Mytobor creates mutexes that guarantees that only one version of itself is running in memory.  Here are the mutexes:

DBWinMutex
prsc32

Unfortunately, this pest will affect most Window systems such as Windows 98, ME, NT, 2000, XP, and Server 2003.
AKA:
Backdoor.Win32.Mytobor.b
W32/Gaobot.worm.pp
W32.Gaobot.gen!poly
W32/Mytob-Fam
TR/Dldr.Monurl.gen
Worm.Mytob.GE
Win32/Mytob.KO
Backdoor.Win32.Mytobor.c
Generic BackDoor
Backdoor.Trojan
BDS/Mytobor.C.54
W32/Spybot-OC

Trojan:
Win32/Ircbrute

Related Files:
N/A

Category:
Backdoor Trojan

Recommended Action:
Remove at once.

Manual removal, while time-consuming and difficult, can be achieved by searching out all of the files and folders that are related to the program.  Not everyone has the time or ability to accomplish this. Therefore, the makers of ZookaWare PC Cleaner have created an easier way.

ZookaWare PC Cleaner is an all-inclusive anti-spyware application that has the ability to eradicate all spyware from your system.  With a 100% guarantee and the backing of the Better Business Bureau, you can feel secure with ZookaWare PC Cleaner.

Download Free Scan
ZookaWare runs on Windows Vista, 7, 8 and 10. It has no ads, popups or bundled software and fully uninstalls by clicking Start > All Programs > select ZookaWare and click Uninstall.

One Response

  1. Billy Benson says:

    I have installed SpyZooka on one desktop and 3 laptops I have at home. I had for more than 3 months now and I am very happy with it!
    Overall excellent product. I recommend it to anyone!

Leave a Reply

Your email address will not be published. Required fields are marked *

css.php