Home / malware

PDF

TrojanDropper:Win32/Rovnix.K

First posted on 17 June 2014.
Source: Microsoft

Aliases :

There are no other names known for TrojanDropper:Win32/Rovnix.K.

Explanation :

Threat behavior

Different parts of the Win32/Rovnix family work together to infect your PC.

This threat writes malicious code to certain disk sectors of the local hard drive.

It then modifies the New Technology FileSystem (NTFS) boot sector (detected as Virus:DOS/Ronvix.gen.!A) to run the code.

Each time your PC starts the modified NTFS boot sector will try to load the malicious code that was written by this threat.



Analysis by Chun Feng

Symptoms

Alerts from your security software may be the only symptom.

Last update 17 June 2014

 

TOP