Trojan.Biloky.A

Even though Trojan horses are dangerous infections the one good thing about them is that they cannot spread on their own accord. The same applies to Trojan.Biloky.A – it does infect the system, but it cannot spread further. Nevertheless, the damage it can cause can be very serious, so you should never underestimate Trojan.Biloky.A and what it brings. After the infection, the Trojan can perform almost anything its creator orders it to do.

After the installation Trojan.Biloky.A tries to hide its presence by posing as a legitimate flash program file – it drops a copy of itself into C:\Documents and Settings\Administrator\Application data\Adobeflash\adobeflash.exe directory and then creating a flash.bat file at the same location. Then the Trojan makes sure that is starts together with Windows whenever you turn on your computer by adding a value into the registry with the subkey that makes it run automatically. At the same time Trojan.Biloky.A makes sure that its removal would present various difficulties to the user by injecting codes into running processes, and hiding itself. Thus, Trojan.Biloky.A can be found in such processes as explorer.exe even though originally it is a legitimate system process.

When the Trojan is done setting itself up, it connects to a remote host that is located at 188.190.99.174 through port 80 to report to the hacker that is has infected yet another computer. Then Trojan.Biloky.A receives configuration data and downloads arbitrary files that is executes immediately. These files also includes other malware which supports that claim that with one Trojan in your system you will soon be infected with many more. Trojan.Biloky.A will also use this established connection with a remote host to transfer sensitive information collected from your computer. It might be your computer configurations or your financial information that the Trojan records via keylogging.

No matter what Trojan.Biloky.A does, everything has “malicious” written all over it, so you have to remove Trojan.Biloky.A no matter what. If plan to terminate the malware manually, you have to stop such malicious processes as froot.exe on your own, and then delete all the Trojan-related files. This task can be quite tedious for someone who is not familiar with how computers work, so if you are not a computer expert, we’d recommend using a trustworthy computer safeguard application to erase Trojan.Biloky.A to the very last file. Do all it takes to get your computer back to normal.