Home Malware Programs Ransomware Cancer Trollware

Cancer Trollware

Posted: February 7, 2017

Threat Metric

Threat Level: 8/10
Infected PCs: 91
First Seen: February 7, 2017
Last Seen: June 16, 2022
OS(es) Affected: Windows

The Cancer Trollware is an application that does not cause any permanent damage to the victim's computer or the files stored on it. However, what it does cause is a mild annoyance due to the number of confusing and disturbing changes it can make to the computer's behavior. The term 'Trollware' may not be familiar to many of our readers, but in general, that's a piece of threat that is not meant to be destructive. Instead, it's sole purpose is to annoy the victim by performing all kinds of unexpected actions that are unusual, to say the least. The author of the Cancer Trollware has created an incredibly annoying application that may prevent not so tech-savvy users from using their computers anytime soon.

When the the Cancer Trollware is executed, it checks the running processes for any process names associated with anti-malware software and terminates them immediately. After this, it modifies the Windows Registry so that it will gain boot persistence and guarantee that the users will not be able to escape its annoying behavior by simply restarting their computers. The changes that the Cancer Trollware makes are numerous, and they involve all kinds of annoying behavior – the user's opened windows will be moved to random directions, various 'troll' images will appear all over the desktop and then disappear in a matter of seconds, songs & voice lines will be played in the background, and the user may lose access to some important Windows features such as the Task Manager.

Another subtle change that the 'Cancer Trollware' brings is that it may rename the C: partition to 'CANCERRRRRRRRRRRRRRRRRRRRRRRRR.' The author does not demand anything in return, and it looks like the sole purpose of the 'Cancer Trollware' is to cause mayhem. The removal of this software might not be an easy task since it stops users from accessing the applications or files stored on their computers. This is why the recommended removal technique is booting in 'Safe Mode' and running a reputable anti-malware application that will resolve the issue in a matter of minutes.

Loading...