16. Command and Control, cont.

• Start the following services:

  • http proxy

  • TCP port redirector,

  • various socks proxies

• Run bot own IRC server, becoming a master for other bots to connect to

• Capture Windows registry traffic, including passwords (sometimes capture entire Windows registry.)