Win32 Trojan is a generic name for a specific type of malware, which infects Windows operating systems.
Technically this form of malware is not as many people believe a virus. A Win32 Trojan by definition does not replicate like a virus or worm, rather it creates a backdoor into the infected system.
This backdoor allows a hacker access to the system remotely. Via this access the hacker can perform a variety of functions some of which may include the following.
- Remote installation of additional malware
- Use of the system as a relay to distribute spam e-mail
- Use of machine as part of a bot net, which is a collection of systems used concurrently to perform a distributed denial of service attack or Ddos attack on a website.
- Data theft, including passwords, credit card numbers, serial numbers etc.
Trojan.Win32 are by far the most prevalent form of malware at the present time, accounting for some 83% of global malware. Antivirus vendor Panda Security, estimate that 59% of computers worldwide are infected with some form of malware, the vast majority of which would be Trojans.
Infection vectors include the following:
- Peer-to-peer file sharing networks.
- Software downloaded via Bitorrents.
- E-mail attachments
- Rogue websites that specifically attempt to install Trojans via JavaScript and/or ActiveX controls.
- Legitimate websites that have been compromised by some form of code injection.
Symptoms of Win32 Trojan infection:
- Internet browser hijacks, changed homepage, constant pop-ups etc.
- General System slowness and impaired performance.
- System pop-up messages, purporting to be from the Windows system, or antivirus vendors, warning of malware infection and directing the user to purchase their removal product.
- The disabling of programs, generally antivirus and anti-spyware software. Also administrative level Windows functions, such as task manager, system snap ins, group policy, control panel, registry editor and various other system tools.
Win32 Trojan removal:
In the first instance attempt removal with installed antivirus software. Unfortunately many Win32 Trojans will disable any antivirus or security software present on the system.
A fresh installation of a dedicated anti-malware program, (we would recommend MalwareBytes), is often successful. Multiple scans may be required, along with a series of reboots.
If attempts to remove the Win32 Trojan are unsuccessful, or if full system capabilities cannot be restored, then it is probably time to seek professional help.
Computer Repairs Online are very experienced in the removal of Win32 trojans. We would generally recommend our incident based, flat rate service, as removal of these trojans can be quite time consuming.
Comments on this entry are closed.