Threat Description

Rogue:​W32/DotTorrent.A

Details

Aliases: Rogue:​W32/DotTorrent.A, Rogue:​W32/DotTorrent.A
Category: Malware
Type: Rogue
Platform: W32

Summary



A trojan, or trojan horse, is a seemingly legitimate program which secretly performs other, usually malicious, functions. It is usually user-initiated and does not replicate.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



Rogue:W32/DotTorrent.A identifies a trojan which displays fake messages indicating an "Antipiracy foundation scanner" has discovered torrent files on the computer violating the copyright of the file's respective owners. This is an attempt to frighten the user into paying money to a (fictional) organization, ICPP, supposedly to pay for the copyright violation fine and for a 'legal license purchase'.

The trojan's extortion scheme qualifies this malicious program as a type of Ransomware.

DotTorrent's activities are more thoroughly discussed in the following F-Secure Labs blogpost:

Execution

On execution, the trojan displays a message box that purports to be a 'copyright violation alert':

The user is then directed to a website where payment may be made for the alleged violation.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More