Home / malware

PDF

Trojan:Win32/Chuckenit.A

First posted on 09 February 2017.
Source: Microsoft

Aliases :

There are no other names known for Trojan:Win32/Chuckenit.A.

Explanation :

This threat may be installed by Trojan:Win32/Xadupi.

It is a software that unchecks checkboxes in installation dialogue boxes, effectively messing with choices without your knowledge during installation. It has the following interface:

During installation, it can add files under a folder named Uncheckit in %ProgramFiles%:

It also adds a tray icon:

It adds three Scheduled Tasks that check and download updates:

It also adds two component files that run as services. Both of these services run automatically at startup:

It also adds an Uninstall entry:





Analysis by James Patrick Dee

Last update 09 February 2017

 

TOP