Home Malware Programs Trojans Trojan:Win32/Lodbak.A!lnk

Trojan:Win32/Lodbak.A!lnk

Posted: May 18, 2015

Threat Metric

Threat Level: 9/10
Infected PCs: 1
First Seen: May 18, 2015
Last Seen: January 25, 2020
OS(es) Affected: Windows

Trojan:Win32/Lodbak.A!lnk is a detection name utilized by anti-malware scanners to name a Trojan infection. Customarily, Trojans such as Trojan:Win32/Lodbak.A!lnk is a Trojan and worm that distributes itself through USB devices, and may take steps to disable your PC's security settings. Because Trojan:Win32/Lodbak.A!lnk's confirmed functions may be part of the early stages of additional attacks, you also should be mindful of the potential for their enabling the collection of information or the installation of other threats. Alerts from your anti-malware products are the primary symptoms of Trojan:Win32/Lodbak.A!lnk infections – and removing Trojan:Win32/Lodbak.A!lnk from an infected hard drive should be viable with those same products.

Trojan:Win32/Lodbak.A!lnk: The Portable File Concealer

Trojan:Win32/Lodbak.A!lnk is threatening software associated with recent attacks against both residents of Thailand and English-speaking PC users. Malware experts only saw Trojan:Win32/Lodbak.A!lnk being distributed in the past year, but its definitive features conform to the standards of previous worms like the Dorkbot family. Trojan:Win32/Lodbak.A!lnk may distribute itself by being installed automatically on USB devices, and then installing itself on new machines that access the infected device automatically.

Trojan:Win32/Lodbak.A!lnk may hide its installation with multiple, automatic changes to your system settings. The Show Hidden Files option is disabled, and the PC's Windows system protection feature also is blocked. These changes let Trojan:Win32/Lodbak.A!lnk Trojans conceal their files on any infected drive, as well as hide other, third-party files.

By default, Trojan:Win32/Lodbak.A!lnk may hide all files on an infected USB drive, making the contents of the drive appear empty. However, victims of Trojan:Win32/Lodbak.A!lnk's attacks may right-click the drive and use the Properties tab (or use the Command Prompt) to confirm that the contents of the drive still are intact, albeit hidden.

Stopping a Worm from Growing Back

Although containment is a priority for any threat attack, preventing worms like Trojan:Win32/Lodbak.A!lnk from reinstalling themselves is especially critical to any PC user's security. Avoid sharing out removable devices that have been contaminated by Trojan:Win32/Lodbak.A!lnk until you've removed Trojan:Win32/Lodbak.A!lnk with an appropriate anti-malware product. Malware researchers have seen some cases of Trojan:Win32/Lodbak.A!lnk Trojans being able to persist through a simple HD reformat that would wipe all benign files. Deleting Trojan:Win32/Lodbak.A!lnk's visible file is unlikely to be a permanent solution.

Since Trojan:Win32/Lodbak.A!lnk may undertake behavior highly conducive to future attacks carried out by other threat, you also may see new symptoms not described in this article. A Command & Control server may instruct Trojan:Win32/Lodbak.A!lnk to take new actions, and Trojan:Win32/Lodbak.A!lnk may install threats with independent, specialized features. As a guideline, malware researchers would assume that any Trojan:Win32/Lodbak.A!lnk infection has the potential to lead to attacks that could collect passwords or generate additional security issues that necessitate extra precautions.

Trojan:Win32/Lodbak.A!lnk has been seen installing itself to new PCs and removable devices, but malware researchers have yet to confirm incidents of Trojan:Win32/Lodbak.A!lnk Trojans creating multiple duplicates of themselves on the same hard drives. However, any anti-malware scans for uninstalling Trojan:Win32/Lodbak.A!lnk should continue until all results are clean, regardless.

Loading...