Home Malware Programs Trojans Trojan.Viknok

Trojan.Viknok

Posted: May 10, 2013

Threat Metric

Threat Level: 9/10
Infected PCs: 42
First Seen: May 10, 2013
Last Seen: May 6, 2020
OS(es) Affected: Windows

Trojan.Viknok is a Trojan that steals information from the affected computer. When Trojan.Viknok is executed, it may connect to the command-and-control (C&C) server. Trojan.Viknok then downloads a file from the above C&C server and saves it to the specific location. Trojan.Viknok then corrupts the specific file so that it can be executed whenever you start Windows. Trojan.Viknok then stops the particular security-related processes, if present such as avast.setup, bdagent.exe, ekrn.exe and mpcmdrun.exe. Trojan.Viknok monitors the web browsers such as chrome.exe, iexplore.exe, opera.exe, firefox.exe and other. Trojan.Viknok checks for communication with any of the particular websites. Trojan.Viknok then steals information and transmits it to the C&C server.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%System%\rpcss.dll File name: %System%\rpcss.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
%System%\[RANDOM CHARACTERS FILE NAME].[RANDOM CHARACTERS FILE EXTENSION] File name: %System%\[RANDOM CHARACTERS FILE NAME].[RANDOM CHARACTERS FILE EXTENSION]
Mime Type: unknown/[RANDOM CHARACTERS FILE EXTENSION]
Group: Malware file

Related Posts

Loading...