Home Malware Programs Trojans Trojan.Artilyb

Trojan.Artilyb

Posted: March 8, 2011

Trojan.Artilyb is a Trojan that alters executable files without permission and drops other malware onto your system. Malware dropped by Trojan.Artilyb may take the form of spyware, remote attack-enabling applications or rogue security applications. Since Trojan.Artilyb infections are running applications, preventing the Trojan from running or removing Trojan.Artilyb from your PC can be difficult. It's suggested that you use anti-malware products with updated malware information to beat this recent threat.

Trojan.Artilyb is a Trojan with Its Fingers All Over Your Executables

This Trojan was discovered in March of 2011, and having your anti-malware applications not just active, but also updated may be a necessity to delete Trojan.Artilyb. Trojan.Artilyb can infect Windows 2K, 2003, NT, XP and Vista and is, therefore, a threat to many if not all Windows users. Some sources indicate that Trojan.Artilyb infects systems through bundled packages distributed on P2P and other free uploading networks.

Trojan.Artilyb is unusually aggressive against running .exe processes, and will attempt to infect them by making corrupt copies that replace the original files. The original files may still be accessible in their original locations, but will be set to use the Hidden attribute and have their extensions stripped. Hidden files are invisible by default but can be seen if one checks the appropriate file viewing option in Windows.

Other Links in Trojan.Artilyb's Deadly Chain

Attacks by Trojan.Artilyb aren't restricted to running executables, but may also consist of the following:

  • Modification of your browser settings to use a proxy server. Proxy server exploitation allows Trojan.Artilyb to redirect your browser to dangerous websites, block safe websites and in some cases steal information such as account login details.
  • The addition of other types of malware. Trojan.Artilyb and other Trojans will almost always drop other spyware, viruses, worms, rogue anti-malware programs or other kinds of threats onto your machine. The longer you put off removing Trojan.Artilyb, the more infections you'll end up needing to clean.
  • Anti-virus scanners and similar necessary system maintenance tools being disabled. Trojan.Artilyb may prevent your security applications from running to prevent Trojan.Artilyb own removal; you can sometimes duck under this function by renaming the relevant .exe file into one that Trojan.Artilyb is programmed to allow, such as iexplore.exe.

This Trojan puts all information on your PC in a high state of vulnerability besides actively causing harm to the system, so you should have no qualms about removing Trojan.Artilyb when you've found it lurking on your hard drive.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 %CurrentFolder%\[ORIGINAL FILE NAME]
    2 %CurrentFolder%\[ORIGINAL FILE NAME].exe

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "[RANDOM CHARACTERS]"
Loading...