Trojan.Ilomo.gen!A

Trojan.Ilomo.gen!A is a seditious Trojan which gains entry to its victims’ PCs by bundling itself together with other malware, most notably TrojanDropper:Win32/Ilomo. Once it roots itself in the system, Trojan.Ilomo.gen!A will inject code into an Internet Explorer process, and will proceed to connect to numerous suspect websites in an attempt to download more malware to the affected PC.

The Trojan will remain hidden on the system by performing all of its activities in the system’s background, thus not drawing attention to itself from PC owners or security applications. This also makes it that much more difficult for the user to identify and remove Trojan.Ilomo.gen!A from the system without some assistance.

The presence of the following files on the system will be a clear indication of infection:

dumpreport.exe
msiexeca.exe
svchosts.exe
upnpsvc.exe

Trojan.Ilomo.gen!A will insert code into the iexplore.exe application, allowing it to connect to the following remote websites without the user's consent:

webmail.re-factoring.cn
secure.loderunner.in
pop3.re-factoring.cn

The Trojan will proceed to download more malware to the infected PC, such as Proxy servers, password stealers. web traffic sniffers and network spreading mechanisms

Protect your PC from infection by Trojan.Ilomo.gen!A by activating your Windows Firewall, steering clear of suspect websites, not downloading suspect applications or codecs and by investing in properly updated security software. If you suspect your PC may already be compromised, you need to limit the damage this Trojan will cause to the system. In order to do this you will need to get rid of Trojan.Ilomo.gen!A as soon as possible. This can easily be achieved by making use of a genuine security tool which will not only destroy Trojan.Ilomo.gen!A but also protect against similar future attacks and threats.