Aliases
-
trojan-clicker.win32.agent.dj
-
trojan.win32.zapchast
-
w32/adclicker.dn
-
puper.dll
-
trojan.popuper
Characteristics
-
Drops more malware
-
Installs itself in the registry
Affected Operating Systems
Recovery Instructions:
Please follow the instructions for removing Trojans.
The restarting of the main process by intmon.exe only works if the main Trojan file is named shnlog.exe.
Therefore, both processes can be terminated by changing the name of the file shnlog.exe, then terminating the shnlog.exe process.
intmon.exe will then terminate itself when it cannot find the main file to re-execute it. Both files can then be deleted and the registry cleaned.
After shnlog.exe has been cleared from the system, standard procedures can be used for disinfection of the other two components.