In this post, I am going to detail the way the Weenkay trojan injected into your computer, and how to clear away Weenkay trojan virus.
What is Weenkay trojan?
| Name | Weenkay |
| Infection Type | Trojan |
| Symptoms |
|
| Similar behavior | Kishop, Neoreblamy, WizzMonetize, Storup, BroExt, Dedok |
| Fix Tool |
See If Your System Has Been Affected by Weenkay trojan |
The name of this type of malware is an allusion to a well-known legend concerning Trojan Horse, which was used by Greeks to get in the city of Troy and win the war. Like a dummy horse that was made for trojans as a present, Weenkay trojan virus is distributed like something legit, or, at least, useful. Harmful applications are hiding inside of the Weenkay trojan virus, like Greeks within a massive wooden dummy of a horse.1Trojan viruses are one of the leading malware kinds by its injection frequency for quite a long period of time. And now, throughout the pandemic, when malware became tremendously active, trojan viruses enhanced their activity, too. You can see a lot of messages on diverse resources, where users are grumbling concerning the Weenkay trojan virus in their computers, and also requesting assistance with Weenkay trojan virus clearing.
Trojan Weenkay is a kind of virus that injects into your PC, and afterwards executes various malicious features. These functions depend on a type of Weenkay trojan: it can function as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Weenkay trojan. Over the last 2 years, trojans are also distributed through email attachments, and most of situations used for phishing or ransomware injection.
Weenkay2 also known as
| Bkav | W32.AIDetectMalware |
| Lionic | Trojan.Win32.Autoit.lWNh |
| Elastic | malicious (moderate confidence) |
| MicroWorld-eScan | Gen:Variant.Strictor.50562 |
| FireEye | Gen:Variant.Strictor.50562 |
| ALYac | Gen:Variant.Strictor.50562 |
| Cylance | unsafe |
| Zillya | Downloader.AutoIt.Win32.2525 |
| Sangfor | Downloader.Win32.Autoit.V07r |
| K7AntiVirus | Trojan ( 700000111 ) |
| Alibaba | TrojanDownloader:Win32/Generic.1db44dde |
| K7GW | Trojan ( 700000111 ) |
| Cybereason | malicious.2e5510 |
| Cyren | W32/AutoIt.CR.gen!Eldorado |
| Symantec | W32.SillyFDC |
| ESET-NOD32 | a variant of Win32/TrojanDownloader.Autoit.NNI |
| APEX | Malicious |
| Cynet | Malicious (score: 100) |
| BitDefender | Gen:Variant.Strictor.50562 |
| NANO-Antivirus | Trojan.Win32.AutoIt.cxrrlo |
| Avast | Win32:Malware-gen |
| Tencent | Autoit.Trojan.Autoit.Eplw |
| Emsisoft | Gen:Variant.Strictor.50562 (B) |
| F-Secure | Trojan.TR/AutoIt.3.46 |
| DrWeb | Trojan.DownLoader10.58564 |
| VIPRE | Gen:Variant.Strictor.50562 |
| TrendMicro | TROJ_SPNR.35CD14 |
| McAfee-GW-Edition | BehavesLike.Win32.Injector.fc |
| Trapmine | malicious.moderate.ml.score |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan-Downloader.Win32.AutoIt |
| GData | Gen:Variant.Strictor.50562 |
| Jiangmin | Trojan.Hesv.dnb |
| Webroot | W32.Suspicious.Heur |
| Avira | TR/AutoIt.3.46 |
| MAX | malware (ai score=85) |
| Xcitium | Malware@#2r6g0r46t8sog |
| Arcabit | Trojan.Strictor.DC582 |
| Microsoft | TrojanDownloader:AutoIt/Weenkay.A |
| Detected | |
| McAfee | Artemis!C287CD82E551 |
| VBA32 | Trojan-Downloader.Autoit.gen |
| Malwarebytes | Malware.AI.3958750887 |
| TrendMicro-HouseCall | TROJ_SPNR.35CD14 |
| SentinelOne | Static AI – Malicious PE |
| MaxSecure | Trojan.Malware.121218.susgen |
| AVG | Win32:Malware-gen |
| DeepInstinct | MALICIOUS |
| CrowdStrike | win/malicious_confidence_100% (W) |
What are the symptoms of Weenkay trojan?
- Sample contains Overlay data;
- Performs HTTP requests potentially not found in PCAP.;
- Reads data out of its own binary image;
- The binary contains an unknown PE section name indicative of packing;
- The binary likely contains encrypted or compressed data.;
- The executable is compressed using UPX;
- Authenticode signature is invalid;
- Attempts to modify proxy settings;
- Touches a file containing cookies, possibly for information gathering;
- Yara rule detections observed from a process memory dump/dropped files/CAPE;
The usual symptom of the Weenkay trojan virus is a progressive entrance of different malware – adware, browser hijackers, and so on. Due to the activity of these harmful programs, your computer becomes very sluggish: malware absorbs substantial quantities of RAM and CPU capacities.
One more visible result of the Weenkay trojan virus visibility is unfamiliar processes showed in task manager. Often, these processes may try to simulate system processes, however, you can recognize that they are not legit by looking at the genesis of these processes. Pseudo system applications and Weenkay trojan’s processes are always detailed as a user’s processes, not as a system’s.
How to remove Weenkay trojan virus?
- Download and install Loaris Trojan Remover.
- Open Loaris and perform a “Standard scan“.
- “Move to quarantine” all items.
- Open “Tools” tab – Press “Reset Browser Settings“.
- Approve the reset pressing “Yes” button in the appeared window.
- Restart your computer.
To eliminate Weenkay trojan and also be sure that all additional malware, downloaded with the help of this trojan, will be eliminated, as well, I’d advise you to use Loaris Trojan Remover.
Weenkay trojan virus is truly hard to get rid of manually. Its pathways are extremely hard to track, and the changes executed by the Weenkay trojan are concealed deeply within the system. So, the possibility that you will make your system 100% clean of trojans is extremely low. And also do not ignore malware that has been downloaded with the help of the Weenkay trojan virus. I assume these arguments are enough to assure that getting rid of the trojan virus by hand is a bad idea.
Weenkay removal guide
To detect and remove all malicious programs on your PC using Loaris Trojan Remover, it’s better to utilize Standard or Full scan. Removable scan, as well as Custom, will scan only specified folders, so these checks are not able to provide the full information.
You can see the detects during the scan process lasts. Nonetheless, to execute any actions against detected malicious programs, you need to wait until the scan is over, or to stop the scan.
To designate the special action for each detected viruses, choose the button in front of the name of detected malicious programs. By default, all malware will be sent to quarantine.
How to remove Weenkay Trojan?
Name: Weenkay
Description: Trojan Weenkay is a kind of virus that infiltrates into your computer, and after that performs different destructive functions. These features depend upon a type of Weenkay trojan: it can act as a downloader for many other malware or as a launcher for another destructive program which is downloaded in addition to the Weenkay trojan. During the last two years, trojans are also dispersed via e-mail attachments, and most of situations utilized for phishing or ransomware infiltration.
Operating System: Windows
Application Category: Trojan
User Review
( votes)- What is Trojan Horse: https://en.wikipedia.org/wiki/Trojan_horse_(computing)
- Weenkay VirusTotal Report: https://www.virustotal.com/api/v3/files/b6571c7ba5fc1101220fa904a5e85536a0fb8598adcfd2c06fc1a9f26bfe1b23
