Know Your Malware: Juny Removal

Juny is a trojan that encrypts files of predefined types (libraries, executables, web pages, programming files, archives, text documents, office projects, etc.), so they can no longer be accessed by the user. It also drops a text file on the desktop containing the list of encrypted files. Upon execution, Juny displays a message in Russian warning the user that the system is infected with the trojan. This message asks the victim to pay for decrypting files and send the ransom to a specified e-mail address. Juny automatically runs on every Windows startup.

Related files: krnlmgr.exe, krnlmngr.dll

Juny properties:
Hides from the user
Stays resident in background Remove Juny, removal instructions

Linked by shanmuga Wednesday, 7th December 2005 8:56PM