Aliases: W32.Elem.Trojan
Variants: N/A

Classification: Malware
Category: Trojan Horse

Status: Dormant
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 21 Nov 2001
Damage: Low

Characteristics: W32.Elem.Trojan is a Trojan that is considered to have minimal damage to one’s computer, especially in terms of stealing or hacking private files or data. This is defined as a Pklite package containing zero-byte files. These zero byte files include Autoexec.bat, Config.sys, Command.com, Progman.ini, Protocol.ini, Win.ini, Win.exe, System.Ini, Shell32.dll and Winsock.dll. Other files that may show that the Trojan is present in you computer include Boot.exe, Element.txt, and Element.ico. The element file contains a message saying, “y()U h@vE jUsT bE|nG |nFEcTEd w|Th ThE "ELEMENT" V|RUS.”

More details about W32.Elem.Trojan

This Trojan can be very harmful to the system as it automatically modifies different files and system components, etc. If your computer is working very slowly and new desktop shortcuts have appeared or the homepage for Internet Explorer has changed, chances are, there is a virus in your computer. It usually comes as a key generator for Windows XP that is why users should be wary about downloading from an untrusted site. As with any viruses or Trojan, W32.Elem.Trojan has capabilities of concealing itself from the user to make it very complicated to trace the Trojan and to allow it to stay resident in the background. Removing this virus from your system must be taken seriously for any wrong deletion may result into damaging your computer further.

If you want to clean your computer from infection, you have to make sure that all infected files are also deleted but the problem usually encountered by users is that not all the files can be deleted or removed easily since it's hard to delete running programs or those concealed as legitimate file. One thing you can do to solve this problem is to download an effective anti-virus program that could completely remove the infection from the PC. There are a lot of programs that may be downloaded from the Internet. Install the program in your PC and run a complete system scan. A list of infected files will be presented to you. Click on those files and delete them but make sure that the system restore function is temporarily disabled. Make sure that all infected files including those being patched or copied to the registry keys are also deleted. After everything has been deleted, modify and restore the files back.