Home Malware Programs Trojans Trojan.Win32.LinkReplacer

Trojan.Win32.LinkReplacer

Posted: December 17, 2007

Trojan.Win32.LinkReplacer is a Trojan, which displays a fake Warning message that states "Your browser was hijacked by Trojan.Win32.LinkReplacer". Trojan.Win32.LinkReplacer's fake Warning message is intended to confuse you, make you believe that you're infected with spyware and finally to convice you to purchase the supposed "reliable" anti-spyware application that they provide, which at the moment is IEDefender.

Trojan.Win32.LinkReplacer infects your PC using fake codecs that pretend to be free video codecs, often found on pornography websites. If you download free video codecs from questionable wesbites, it is highly probable that you're allowing a Trojan to be installed in your computer.Trojans such as Trojan.Win32.LinkReplacer are notorious for this type of deceptive methods.

Once you click on the fake alert message, you will be directed to IEDefender's home site where you get the commercial version of this rogue anti-spyware application. The immediate removal of Trojan.Win32.LinkReplacer is recommended.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 ecxwp.dll
    2 stream32a.dll
    3 vipextqtr.dll
    4 windivx.dll

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}2982068d063848ddb0b8029750411a843ba096caa45ab117721e725079cc53a140613dee6ad5fec910606c25b25262fd9ceecf911241c9890541167edf53739ffe6e6a62a572e84e9eaee12eb3ee8a2b

One Comment

Loading...