Trojan.Darkshell
Trojan.Darkshell is a Trojan that might be able to initiate distributed denial of service (DDoS) attacks. After installation, Trojan.Darkshell copies itself to the specific web page. Trojan.Darkshell also downloads and installs a rootkit with the particular file name. The rootkit modifies the System Service Dispatch Table (SSDT) in a try to disguise Trojan.Darkshell. Trojan.Darkshell then creates the certain registry subkey to add itself as a system service. Trojan.Darkshell also creates some registry entries. Trojan.Darkshell connects to the particular website to post a unique identifier of the affected computer system and downloads a list of web page links and then initiates a distributed denial-of-service attack on the given web page links. Uninstall Trojan.Darkshell as soon as possible.
File System Details
# | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
---|---|---|
1. | %System%\fkrekk[RANDOM NUMBERS].exe | |
2. | %System%\drivers\PCIDump.sys |
Submit Comment
Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.