In this post, I am going to detail how the Downeks trojan injected right into your computer, and also how to get rid of Downeks trojan virus.
What is Downeks trojan?
| Name | Downeks |
| Infection Type | Trojan |
| Symptoms |
|
| Similar behavior | Morkus, OnionDog, Fragtor, Cryware, ExtenBro, Poetic |
| Fix Tool |
See If Your System Has Been Affected by Downeks trojan |
The name of this kind of malware is a reference to a popular legend regarding Trojan Horse, that was used by Greeks to enter into the city of Troy and win the battle. Like a dummy horse that was made for trojans as a gift, Downeks trojan virus is dispersed like something legit, or, at least, helpful. Malicious applications are concealing inside of the Downeks trojan virus, like Greeks within a big wooden dummy of a horse.1Trojan viruses are among the leading malware sorts by its injection rate for quite a very long time. And now, throughout the pandemic, when malware became significantly active, trojan viruses boosted their activity, too. You can see a lot of messages on diverse sources, where users are grumbling about the Downeks trojan virus in their computer systems, as well as requesting assistance with Downeks trojan virus clearing.
Trojan Downeks is a type of virus that infiltrates right into your computer, and afterwards performs various malicious features. These functions rely on a sort of Downeks trojan: it might serve as a downloader for other malware or as a launcher for another destructive program which is downloaded together with the Downeks trojan. Throughout the last two years, trojans are also dispersed through email add-ons, and in the majority of instances used for phishing or ransomware infiltration.
Downeks2 also known as
| Lionic | Trojan.Win32.Generic.mzPP |
| tehtris | Generic.Malware |
| MicroWorld-eScan | Trojan.GenericKD.61050394 |
| ALYac | Trojan.GenericKD.61050394 |
| Cylance | Unsafe |
| Sangfor | Trojan.Win32.Save.a |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| Alibaba | Trojan:MSIL/Downeks.3df2a57e |
| K7GW | Riskware ( 0040eff71 ) |
| Cybereason | malicious.c874ab |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of Generik.MTIUEMC |
| APEX | Malicious |
| Paloalto | generic.ml |
| ClamAV | Win.Malware.Bladabindi-9867738-0 |
| Kaspersky | HEUR:Trojan.MSIL.Downeks.gen |
| BitDefender | Trojan.GenericKD.61050394 |
| NANO-Antivirus | Trojan.Win32.Downeks.jqtngf |
| Avast | Win32:Malware-gen |
| Ad-Aware | Trojan.GenericKD.61050394 |
| Emsisoft | Trojan.GenericKD.61050394 (B) |
| DrWeb | Trojan.DownLoader21.25838 |
| VIPRE | Trojan.GenericKD.61050394 |
| TrendMicro | TROJ_GEN.R002C0PGT22 |
| McAfee-GW-Edition | RDN/Real Protect-LS |
| Trapmine | malicious.high.ml.score |
| FireEye | Generic.mg.ec002157e2daa999 |
| Sophos | ML/PE-A |
| Ikarus | Trojan.Win32.Turla |
| GData | Trojan.GenericKD.61050394 |
| Jiangmin | Trojan.MSIL.acuir |
| Avira | HEUR/AGEN.1216669 |
| MAX | malware (ai score=85) |
| Antiy-AVL | Trojan/Generic.ASMalwS.5406 |
| Arcabit | Trojan.Generic.D3A38E1A |
| ViRobot | Trojan.Win32.Z.Zbot.569176 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win32.Dynamer.C1408999 |
| McAfee | RDN/Real Protect-LS |
| VBA32 | Trojan.MSIL.Agent |
| Malwarebytes | Malware.AI.398003760 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0PGT22 |
| Rising | Trojan.Downeks!8.622B (CLOUD) |
| Yandex | Trojan.Agent!xIUoY0CHdP0 |
| SentinelOne | Static AI – Malicious PE |
| MaxSecure | Trojan.Malware.73692869.susgen |
| Fortinet | PossibleThreat |
| BitDefenderTheta | Gen:NN.ZemsilF.34582.Im2@ae5Uxif |
| AVG | Win32:Malware-gen |
| Panda | Trj/GdSda.A |
| CrowdStrike | win/malicious_confidence_100% (D) |
What are the symptoms of Downeks trojan?
- SetUnhandledExceptionFilter detected (possible anti-debug);
- Sample contains Overlay data;
- Presents an Authenticode digital signature;
- Creates RWX memory;
- Checks adapter addresses which can be used to detect virtual network interfaces;
- Guard pages use detected – possible anti-debugging.;
- Dynamic (imported) function loading detected;
- CAPE extracted potentially suspicious content;
- The binary likely contains encrypted or compressed data.;
- Authenticode signature is invalid;
- Attempts to modify desktop wallpaper;
- A process attempted to delay the analysis task by a long amount of time.;
- Creates or sets a registry key to a long series of bytes, possibly to store a binary or malware config;
- Created a process from a suspicious location;
- Installs itself for autorun at Windows startup;
The common signs and symptom of the Downeks trojan virus is a steady appearance of various malware – adware, browser hijackers, et cetera. Because of the activity of these destructive programs, your system comes to be very slow: malware consumes large amounts of RAM and CPU capabilities.
One more visible effect of the Downeks trojan virus existence is unfamiliar programs showed off in task manager. Frequently, these processes might attempt to mimic system processes, however, you can recognize that they are not legit by looking at the genesis of these processes. Pseudo system applications and Downeks trojan’s processes are always detailed as a user’s processes, not as a system’s.
How to remove Downeks trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To eliminate Downeks trojan and also be sure that all satellite malware, downloaded with the help of this trojan, will be cleaned, as well, I’d recommend you to use Loaris Trojan Remover.
Downeks trojan virus is extremely tough to remove manually. Its pathways are extremely difficult to track, as well as the modifications executed by the Downeks trojan are concealed deeply within the system. So, the opportunity that you will make your system 100% clean of trojans is very low. And do not ignore malware that has been downloaded with the help of the Downeks trojan virus. I believe these arguments suffice to assure that deleting the trojan virus manually is an awful plan.
Downeks removal guide
To detect and delete all malicious items on your computer using Loaris, it’s better to make use of Standard or Full scan. Removable scan, as well as Custom, will check only specified folders, so such types of scans are not able to provide the full information.
You can see the detects during the scan process goes. Nonetheless, to perform any actions against detected malware, you need to wait until the process is over, or to interrupt the scan.
To choose the specific action for each detected malicious programs, click the knob in front of the detection name of detected malware. By default, all malware will be moved to quarantine.
How to remove Downeks Trojan?
Name: Downeks
Description: Trojan Downeks is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Downeks trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Downeks trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan
User Review
( votes)- What is Trojan Horse: https://en.wikipedia.org/wiki/Trojan_horse_(computing)
- Downeks VirusTotal Report: https://www.virustotal.com/api/v3/files/78cd6b616c20541d5b1a0223209143239c342f4ab5d869101a02a9c4b661a06c
