Home Malware Programs Adware Trolatunt

Trolatunt

Posted: April 1, 2014

Threat Metric

Ranking: 3,929
Threat Level: 2/10
Infected PCs: 5,466
First Seen: April 1, 2014
Last Seen: October 17, 2023
OS(es) Affected: Windows


Trolatunt is adware that may show unwanted pop-up ads and messages on the computer system. The pop-up messages and ads of Trolatunt were created most likely for promotional intentions, and they may be used to advertise numerous suspicious websites. Computer users may start receiving these messages and ads if their computer systems are infected with adware. Trolatunt may slow down the PC and show pop-up advertisements and messages on every website the computer user visits. Trolatunt may usually come packaged with other free programs that PC users can download from the Internet. Some free software downloads do not announce computer users that other additional software may also be installed, and the PC user may later find Trolatunt installed on the computer. Trolatunt may also set active links on random words. When the computer user hovers over these words, Trolatunt's ads may appear on the PC.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{2D36C200-0855-4AEF-9004-51647E95F0BB}{59bc35cc-f3cb-4e2b-a21d-481d781207af}{A92B1AC1-CC1D-4FB9-84D0-8FD41D08C4AA}{BE684E0C-FE07-469B-BB8D-C471DA46C3C2}{db39fa04-97db-4500-8306-6bfeeff1929b}{E153AE67-D58A-406D-A93D-C353D665C7D5}HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Tracing\updateTrolatunt_RASAPI32SOFTWARE\Microsoft\Tracing\updateTrolatunt_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{59bc35cc-f3cb-4e2b-a21d-481d781207af}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{db39fa04-97db-4500-8306-6bfeeff1929b}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{59bc35cc-f3cb-4e2b-a21d-481d781207af}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{59bc35cc-f3cb-4e2b-a21d-481d781207af}SOFTWARE\TrolatuntSOFTWARE\Wow6432Node\Microsoft\Tracing\updateTrolatunt_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updateTrolatunt_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{59bc35cc-f3cb-4e2b-a21d-481d781207af}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{db39fa04-97db-4500-8306-6bfeeff1929b}SOFTWARE\Wow6432Node\TrolatuntSYSTEM\ControlSet001\services\eventlog\Application\Update TrolatuntSYSTEM\ControlSet001\services\Update TrolatuntSYSTEM\CurrentControlSet\services\eventlog\Application\Update TrolatuntSYSTEM\CurrentControlSet\services\Update TrolatuntHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Trolatunt

Additional Information

The following directories were created:
%PROGRAMFILES%\Trolatunt%PROGRAMFILES(x86)%\Trolatunt
Loading...