Home / malware

PDF

Tool:Win32/Lambot

First posted on 28 January 2012.
Source: Microsoft

Aliases :

Tool:Win32/Lambot is also known as Win-AppCare/MircPack.90112 (AhnLab), Tool.Moo (Dr.Web), Backdoor.Irc.Lambot.G (Ikarus), MotherboardMonitor (McAfee), HACKINGTOOLS_MOTHERBOARDMONITOR (Trend Micro).

Explanation :

Tool:Win32/Lambot is a DLL file that is used to gather information about the affected computer. It is used mainly in customized installers for the IRC client MIRC.


Top

Tool:Win32/Lambot is a DLL file that is used to gather information about the affected computer. It is used mainly in customized installers for the IRC client MIRC.

In most instances, the DLL files is named "moo.dll", and may be found in the MIRC installation folder.

In itself, Win32/Lambot is not malicious, but it may be used by malicious scripts.

It gathers the following information about the affected computer:

• Connection speed
• CPU type
• Disc capacity
• Graphic card information
• Motherboard information
• Network devices
• Operating system
• RAM usage
• Uptime

Analysis by Stefan Sellmer

Last update 28 January 2012

 

TOP