Home Malware Programs Trojans Trojan.WinLNK.Runner.bl

Trojan.WinLNK.Runner.bl

Posted: June 27, 2013

Threat Metric

Ranking: 5,072
Threat Level: 8/10
Infected PCs: 40,680
First Seen: June 27, 2013
Last Seen: March 8, 2025
OS(es) Affected: Windows

Trojan.WinLNK.Runner.bl is a Trojan that is a member of a Dorkbot family. Trojan.WinLNK.Runner.bl spreads via exchangeable memory, chatting applications and sharing websites like Facebook. Trojan.WinLNK.Runner.bl contains a payload of spyware as it is focused on tracking the affected PC user's activities in order to steal logins, such as user names and passwords, and other sensitive and private information. Target computer users are advised to reset logins together with extermination of Trojan.WinLNK.Runner.bl.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%HOMEDRIVE%\Google\AutoIt3.exe%HOMEDRIVE%\Google\Google.lnk%HOMEDRIVE%\Google\googleupdate.a3x%HOMEDRIVE%\Google\GoogleUpdate.lnk%HOMEDRIVE%\Google\Skypee.lnk

Additional Information

The following directories were created:
%HOMEDRIVE%\Skypee
Loading...