Remove Trojan.Winloggot

Posted on: June 26th, 2009


Discovered: June 26, 2009
Updated:

June 26, 2009 4:23:25 PM
Type:

Trojan
Systems Affected:

Windows 2000, Windows NT, Windows Server 2003, Windows Vista, Windows XP
Recommended Action:
In order to Remove Trojan.Winloggot you need to Download the ‘No Adware’ remover software. Based on our testing this was the best peforming remover of Trojan.Winloggot ..

No Adware Review

Technical Details:

When the Trojan is executed, it may create the following files:

* %System%\C3A5
* %System%\C4D5
* %System%\fhpatch.dll
* %System%\fiplock.dll
* %System%\IPHACTION.dll
* %System%\iphy.dll
* %System%\IpSvchostF.dll
* %System%\tcpcon.dll
* %System%\TRSOCR.dat

Next, the Trojan may delete the following file:
%System%\Dllcache\Winlogon.exe

It then infects the following file:
%System%\Winlogon.exe (Trojan.Winloggot!Inf)

Next, the Trojan may contact the following URLs to ensure it executes whenever Windows starts:

* [http://]www.dofulfill.info/tcpco[REMOVED]
* [http://]www.dofulfill.info/IPHACT[REMOVED]
* [http://]www.dofulfill.info/TRSOC[REMOVED]
* [http://]www.dofulfill.com/doInst[REMOVED]

The Trojan may also open a back door and listen for incoming connections on a random UDP port.
Action Steps:
FREE SCAN: NoAdware can Remove Trojan.Winloggot . Click the link below for your free download & scan your PC now.

Please click here for manual removal instructions.

Posted on Friday, June 26th, 2009 at 11:30 am - filed under Blog, Trojan.