About Trojan Element
Trojan Element is a Trojan horse that arrives
appearing to be a key generator for Windows XP.
It may also be available from a file sharing
application service named Kazaa.
This Trojan is actually a Pklite package
containing zero-byte files. Its purpose is to
overwrite existing files with the zero-byte
files.
NOTE: The Trojan assumes that the system
contains the path C:\Windows, and other default
paths for systems running Windows 9x.
It creates the following zero-byte files:
- C:\Autoexec.bat
- C:\Config.sys
- C:\Command.com
- C:\Windows\Progman.ini
- C:\Windows\Protocol.ini
- C:\Windows\Win.ini
- C:\Windows\Win.exe
- C:\Windows\System.Ini
- C:\Windows\System\Kernel32.dll
- C:\Windows\System\Shell32.dll
- C:\Windows\System\Winsock.dll
- C:\Boot.exe (12,288 bytes)
- C\Windows\Element.txt (594 bytes)
- C:\Windows\Element.ico (766 bytes)
- C:\Windows\Desktop\Element3.Lnk
- C:\Windows\Start Menu\Element3.Lnk
- C:\Windows\Start Menu\Programs\Startup\Element.Lnk
- C:\Windows\Start Menu\Programs\Startup\Boot.Lnk
The file C:\Boot.exe is a program which will
reboot the system if it is executed.
The file C:\Windows\Element.txt is a short text
file which proclaims the Trojan to be the
"ELEMENT" virus:
y()U h@vE jUsT bE|nG |nFEcTEd w|Th ThE
"ELEMENT" V|RUS
This file contains other text that is related to
the author.
Also known as: W32.Elem.Trojan
Trojan Element Removal
Automatic Removal: Using BPS
Spyware & Adware Remover
to detect and remove Trojan.Element AUTOMATICALLY!
Manual Removal:
Not Available.
Detection and Removal Instructions for Trojans
| 
