La venganza quitar el troyano de tu PC
eliminan la amenaza

La venganza quitar el troyano de tu PC

El troyano venganza es un arma peligrosa utilizado en contra de los usuarios de computadoras en todo el mundo. Infecta principalmente a través de instaladores de software infectados. Nuestro artículo da una visión general de su comportamiento en función de las muestras recogidas e informes disponibles, También puede ser útil en el intento de eliminar el virus.

Resumen de amenazas

NombreLa venganza de Troya
EscribeTrojan
Descripción breveThe Revenge Trojan is a computer virus that is designed to silently infiltrate computer systems.
Los síntomasLas víctimas no pueden experimentar síntomas aparentes de infección.
Método de distribuciónLas vulnerabilidades de software, Instalaciones de dominio público, paquetes combinados, Guiones y otros.
Herramienta de detección See If Your System Has Been Affected by Revenge Trojan

Descargar

Herramienta de eliminación de software malintencionado

Experiencia de usuarioUnirse a nuestro foro to Discuss Revenge Trojan.

Revenge Trojan – Distribution Methods

The Revenge Trojan has been spotted in a recent attack campaign. An unknown hacker collective is behind the ongoing attacks, at the moment there is no information about their identity. The captured samples were identified as malware through one of the most common intrusion mechanisms — documentos infectados. The virus installation code is made part of macros that are embedded in the payload documents, que pueden ser de cualquiera de los tipos populares: documentos de texto, hojas de cálculo, presentaciones y bases de datos. Once they are opened by the victim users a prompt will appear asking the victims to enable the content. The window will usually state that this is required in order to view correctly the files.

What’s more dangerous is that other similar tactics can be employed as well. One of the common cases is when the hackers embed the virus installation instructions in software setup files. They target applications that are popularly downloaded by end users such as system utilities, suites creatividad, de productividad de oficina y aplicaciones y etc..

Both the virus files themselves and these two payload types are usually spread through methods that can infect thousands of users at once. There are several methods such as the following:

  • Los mensajes de correo electrónico SPAM — The hackers can craft phishing emails that appear notifications as being sent by legitimate services. This is done by using their own design layout and text body contents. The fake email phishing messages will link the files in text links or interactive contents. Alternatively they can be directly attached to the messages.
  • Páginas web maliciosas — A related strategy is to create web pages that imitate legitimate services, portales de descarga, y páginas de destino, etc.. They are hosted on similar sounding domain names and in some cases utilizing stolen or hacker-generated security certificates.
  • File-Sharing Sites — Both the standalone files and infected payloads are widely available on networks like BitTorrent where both legitimate and pirate content is freely shared across Internet users.
  • Los secuestradores de navegador — Dangerous web browser plugins can be be made by the criminals that are made compatible with the most popular web browsers and uploaded to the relevant repositories. They are accompanied by fake user reviews and stolen or hacker-made developer credentials in order to confuse the victims into thinking that the extension is safe. Their descriptions will promise the addition of new features or performance optimizations.

Other tactics can additionally be used in forthcoming attacks and upcoming versions of the Revenge Trojan.

Revenge Trojan – Detailed Description

The Revenge Trojan appears to be an original creation which doesn’t use any code snippets from previous threats. At the time of writing this article there is information about the identity of the group behind the ongoing attacks. We presume that the threat is modular in nature and that various modules can be added to it.

The captured Revenge Trojan instance appears to launch a main engine which connects to a hacker-controlled server and allows the criminal operators to spy on the victims. Through this secure connection they have the ability to take over control of the affected machines, steal their data and carry out all sorts of malicious actions.

A PowerShell-based script is launched which allows all sorts of components to be added. Trojans such as this one usually all include a certain set of common behavior patterns. A list of them is the following:

  • Recuperación de información — The engine can be programmed to extract sensitive information that can be used to generate an unique ID that is specfiic to each individual computer. This is done by an algorithm that takes its input parameters from data sets such as the parts list of the installed hardware components, ajustes de usuario, regional preferences and other related metrics. The other dangerous mechanic used by Trojans is the exposure of personal information which is done by programming the strings to look for strings that contain directly reveal the victims. Common ones include their name, dirección, número de teléfono, intereses y las credenciales de la cuenta almacenados. If the Trojan interacts with the Windows Volume Manager it can also search the removable storage devices and available network shares. The obtained data sets can be used for various crimes including identity theft, chantaje y abuso financiero.
  • Modificación de opciones de inicio — A popular mechanism that is made part of most Trojans, possibly including future Revenge Trojan variants, is the ability to modify the boot options and configuration files that will set it to automatically start once the computer is powered on. This can also disable most manual user recovery guides as they depend on access to recovery boot menus.
  • Registro de Cambios de Windows — The Trojan module is capable of accessing the Registry records not only to create strings for itself but also to modify existing ones. If values that are used by the operating system are affected then the victim users will be unable to access certain services and may experience serious performance issues. Changes to strings used by third-party applications can lead to unexpected errors.
  • Removal of Sensitive Data — The engine can be programmed to locate and delete sensitive files that can seriously disrupt the usual recovery procedure. This is done by targeting System Restore Points, Las copias de seguridad, Shadow Volume Copies and etc. In this case the victims will need to se a combination of a professional-grade anti-spyware utility and data recovery program.
  • Las cargas útiles adicionales de entrega — The Revenge Trojan can be instructed to insert other malicious threats on the compromised machines.

Future Revenge Trojan campaigns can be instructed to carry out other actions as configured by the hackers.

Remove Revenge Trojan

Si su sistema informático fue infectado con el La venganza de Troya, usted debe tener un poco de experiencia en la eliminación de software malintencionado. Usted debe deshacerse de este troyano lo más rápido posible antes de que pueda tener la oportunidad de propagarse e infectar más otros ordenadores. Debe eliminar el troyano y seguir la guía de instrucciones paso a paso se proporciona a continuación.

Nota! Su sistema informático puede verse afectada por La venganza de Troya y otras amenazas.
Escanear su PC con SpyHunter
SpyHunter es una poderosa herramienta de eliminación de malware diseñado para ayudar a los usuarios con el análisis de la seguridad del sistema en profundidad, detección y eliminación de La venganza de Troya.
Tenga en cuenta, que el escáner del SpyHunter es sólo para la detección de malware. Si SpyHunter detecta malware en su PC, usted tendrá que comprar herramienta de eliminación de malware de SpyHunter para eliminar las amenazas de malware. Leer nuestra SpyHunter 5 opinión. Haga clic en los enlaces correspondientes para comprobar de SpyHunter EULA, política de privacidad y Criterios de evaluación de amenazas.

To remove Revenge Trojan sigue estos pasos:

1. Boot Your PC In Safe Mode to isolate and remove Revenge Trojan files and objects
2. Find files created by Revenge Trojan on your PC

Utilizar SpyHunter para detectar programas maliciosos y no deseados

3. La detección de programas maliciosos y no deseados con la herramienta SpyHunter Anti-Malware

Martin Beltov

Martin se graduó con un título en Edición de la Universidad de Sofía. Como un entusiasta de la seguridad cibernética que le gusta escribir sobre las últimas amenazas y mecanismos de intrusión.

Más Mensajes - Sitio web

Sígueme:
Gorjeogoogle Plus

Dejar un comentario

Su dirección de correo electrónico no será publicada. Los campos necesarios están marcados *

Se agotó el tiempo límite. Vuelve a cargar de CAPTCHA.

Compartir en Facebook Compartir
Cargando ...
Compartir en Twitter Pío
Cargando ...
Compartir en Google Plus Compartir
Cargando ...
Compartir en Linkedin Compartir
Cargando ...
Compartir en Digg Compartir
Compartir en Reddit Compartir
Cargando ...
Compartir en Stumbleupon Compartir
Cargando ...